260001
|
- |
|
apple
|
itunes
|
Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.
|
CWE-399
Resource Management Errors
|
CVE-2010-0531
|
2017-09-19 10:30 |
2010-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260002
|
- |
|
apple
|
itunes
|
Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse.
|
CWE-362
Race Condition
|
CVE-2010-0532
|
2017-09-19 10:30 |
2010-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260003
|
- |
|
apple
|
itunes
|
Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html
'This issue does not affect Mac OS X systems.'
|
CWE-362
Race Condition
|
CVE-2010-0532
|
2017-09-19 10:30 |
2010-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260004
|
- |
|
apple
|
quicktime
|
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-0536
|
2017-09-19 10:30 |
2010-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260005
|
- |
|
apple
|
quicktime
|
Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html
' This issue does not affect Mac OS X systems.'
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-0536
|
2017-09-19 10:30 |
2010-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260006
|
- |
|
apple
|
safari webkit
|
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary w…
|
CWE-79
Cross-site Scripting
|
CVE-2010-0544
|
2017-09-19 10:30 |
2010-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260007
|
- |
|
cisco
|
ios
|
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of …
|
NVD-CWE-noinfo
|
CVE-2010-0586
|
2017-09-19 10:30 |
2010-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260008
|
- |
|
google
|
chrome
|
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive in…
|
CWE-200
Information Exposure
|
CVE-2010-0643
|
2017-09-19 10:30 |
2010-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260009
|
- |
|
google
|
chrome
|
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity …
|
CWE-200
Information Exposure
|
CVE-2010-0644
|
2017-09-19 10:30 |
2010-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260010
|
- |
|
google
|
chrome
|
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use …
|
CWE-189
Numeric Errors
|
CVE-2010-0645
|
2017-09-19 10:30 |
2010-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|