{"cves":[{"id":"CVE-2011-2441","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple stack-based buffer overflows in CoolType.dll in Adobe Reader and\nAcrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow\nattackers to execute arbitrary code via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2441"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2440","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUse-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1,\n9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute\narbitrary code via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2440"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2439","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x\nbefore 10.1.1 allow attackers to execute arbitrary code via unspecified\nvectors, related to a \"memory leakage condition vulnerability.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2439"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2438","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple stack-based buffer overflows in the image-parsing library in Adobe\nReader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before\n10.1.1 allow attackers to execute arbitrary code via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2438"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2437","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nHeap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1,\n9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute\narbitrary code via unspecified vectors, a different vulnerability than\nCVE-2011-2433 and CVE-2011-2434.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-2437"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2436","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nHeap-based buffer overflow in the image-parsing library in Adobe Reader and\nAcrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows\nattackers to execute arbitrary code via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2436"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2435","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nBuffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before\n9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code\nvia unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2435"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2434","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nHeap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1,\n9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute\narbitrary code via unspecified vectors, a different vulnerability than\nCVE-2011-2433 and CVE-2011-2437.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-2434"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2433","published":"2011-09-15T12:26:00","updated_at":"2025-07-17T16:42:36.245039+00:00","description":"\nHeap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1,\n9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute\narbitrary code via unspecified vectors, a different vulnerability than\nCVE-2011-2434 and CVE-2011-2437.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2433"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2432","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nBuffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x\nbefore 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to\nexecute arbitrary code via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2432"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2431","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x\nbefore 10.1.1 allow attackers to execute arbitrary code via unspecified\nvectors, related to a \"security bypass vulnerability.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.adobe.com/support/security/bulletins/apsb11-24.html","https://www.cve.org/CVERecord?id=CVE-2011-2431"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.4.6-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.4.6-0maverick1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"9.4.6-0natty1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"9.4.6~enu-0oneiric1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1353","published":"2011-09-15T12:26:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows\nallows local users to gain privileges via unknown vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"negligible","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-1353"],"bugs":[""],"patches":{"acroread":[]},"tags":{},"packages":[{"name":"acroread","source":"https://ubuntu.com/security/cve?package=acroread","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=acroread","debian":"https://tracker.debian.org/pkg/acroread","statuses":[{"release_codename":"hardy","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-3362","published":"2011-09-15T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nInteger signedness error in the decode_residual_block function in cavsdec.c\nin libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav\nthrough 0.7.1, allows remote attackers to cause a denial of service (memory\ncorruption and application crash) or possibly execute arbitrary code via a\ncrafted Chinese AVS video (aka CAVS) file.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"ffmpeg-extra in multiverse needs to have matching version"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.ocert.org/advisories/ocert-2011-002.html","https://ubuntu.com/security/notices/USN-1209-1","https://ubuntu.com/security/notices/USN-1209-2","https://www.cve.org/CVERecord?id=CVE-2011-3362"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641478"],"patches":{"ffmpeg":["upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=c5cbda50793e311aa73489d12184ffd6761c9fbf","upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=9f06c1c61e876e930753da200bfe835817e30a53","upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=4a71da0f3ab7f5542decd11c81994f849d5b2c78","upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=961a1a81d88a05afabb895f8a9dd11e789a07d89","vendor: http://lists.debian.org/debian-security-announce/2011/msg00216.html"],"ffmpeg-extra":[],"libav":["upstream: http://git.libav.org/?p=libav.git;a=commitdiff;h=bd968d260aef322fb32e254a3de0d2036c57bd56"],"libav-extra":[]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"4:0.5.1-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"4:0.6-2ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"ffmpeg-extra","source":"https://ubuntu.com/security/cve?package=ffmpeg-extra","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ffmpeg-extra","debian":"https://tracker.debian.org/pkg/ffmpeg-extra","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"4:0.5.1-1ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"4:0.6-2ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"libav","source":"https://ubuntu.com/security/cve?package=libav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libav","debian":"https://tracker.debian.org/pkg/libav","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"4:0.6.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"4:0.7.1-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"libav-extra","source":"https://ubuntu.com/security/cve?package=libav-extra","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libav-extra","debian":"https://tracker.debian.org/pkg/libav-extra","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"4:0.6.4-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"4:0.7.3ubuntu0.11.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1209-1","USN-1209-2"],"notices":[{"id":"USN-1209-1","title":"FFmpeg vulnerabilities","summary":"FFmpeg could be made to run programs as your login if it opened a specially\ncrafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-09-19T17:51:08.756042","description":"It was discovered that FFmpeg incorrectly handled certain malformed ogg\nfiles. If a user were tricked into opening a crafted ogg file, an attacker\ncould cause a denial of service via application crash, or possibly execute\narbitrary code with the privileges of the user invoking the program. This\nissue only affected Ubuntu 10.10. (CVE-2011-1196)\n\nIt was discovered that FFmpeg incorrectly handled certain malformed AMV\nfiles. If a user were tricked into opening a crafted AMV file, an attacker\ncould cause a denial of service via application crash, or possibly execute\narbitrary code with the privileges of the user invoking the program. This\nissue only affected Ubuntu 10.10. (CVE-2011-1931)\n\nIt was discovered that FFmpeg incorrectly handled certain malformed APE\nfiles. If a user were tricked into opening a crafted APE file, an attacker\ncould cause a denial of service via application crash. (CVE-2011-2161)\n\nEmmanouel Kellinis discovered that FFmpeg incorrectly handled certain\nmalformed CAVS files. If a user were tricked into opening a crafted CAVS\nfile, an attacker could cause a denial of service via application crash, or\npossibly execute arbitrary code with the privileges of the user invoking\nthe program. (CVE-2011-3362)\n","is_hidden":false,"release_packages":{"lucid":[{"name":"ffmpeg","version":"4:0.5.1-1ubuntu1.2","description":"multimedia player, server and encoder","is_source":true},{"name":"libavformat52","version":"4:0.5.1-1ubuntu1.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/4:0.5.1-1ubuntu1.2"},{"name":"libavcodec52","version":"4:0.5.1-1ubuntu1.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/4:0.5.1-1ubuntu1.2"}],"maverick":[{"name":"ffmpeg","version":"4:0.6-2ubuntu6.2","description":"multimedia player, server and encoder","is_source":true},{"name":"libavformat52","version":"4:0.6-2ubuntu6.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/4:0.6-2ubuntu6.2"},{"name":"libavcodec52","version":"4:0.6-2ubuntu6.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/4:0.6-2ubuntu6.2"}]},"type":"USN","cves_ids":["CVE-2011-2161","CVE-2011-1931","CVE-2011-1196","CVE-2011-3362"]},{"id":"USN-1209-2","title":"Libav vulnerabilities","summary":"Libav could be made to run programs as your login if it opened a specially\ncrafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-09-19T17:55:16.946126","description":"It was discovered that Libav incorrectly handled certain malformed ogg\nfiles. If a user were tricked into opening a crafted ogg file, an attacker\ncould cause a denial of service via application crash, or possibly execute\narbitrary code with the privileges of the user invoking the program.\n(CVE-2011-1196)\n\nIt was discovered that Libav incorrectly handled certain malformed AMV\nfiles. If a user were tricked into opening a crafted AMV file, an attacker\ncould cause a denial of service via application crash, or possibly execute\narbitrary code with the privileges of the user invoking the program.\n(CVE-2011-1931)\n\nEmmanouel Kellinis discovered that Libav incorrectly handled certain\nmalformed CAVS files. If a user were tricked into opening a crafted CAVS\nfile, an attacker could cause a denial of service via application crash, or\npossibly execute arbitrary code with the privileges of the user invoking\nthe program. (CVE-2011-3362)\n","is_hidden":false,"release_packages":{"natty":[{"name":"libav","version":"4:0.6.2-1ubuntu1.1","description":"Multimedia player, server, encoder and transcoder","is_source":true},{"name":"libavformat52","version":"4:0.6.2-1ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/libav","version_link":"https://launchpad.net/ubuntu/+source/libav/4:0.6.2-1ubuntu1.1"},{"name":"libavcodec52","version":"4:0.6.2-1ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/libav","version_link":"https://launchpad.net/ubuntu/+source/libav/4:0.6.2-1ubuntu1.1"}]},"type":"USN","cves_ids":["CVE-2011-1196","CVE-2011-1931","CVE-2011-3362"]}]},{"id":"CVE-2011-3481","published":"2011-09-14T17:17:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe index_get_ids function in index.c in imapd in Cyrus IMAP Server before\n2.4.11, when server-side threading is enabled, allows remote attackers to\ncause a denial of service (NULL pointer dereference and daemon crash) via a\ncrafted References header in an e-mail message.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-3481"],"bugs":[""],"patches":{"cyrus-imapd-2.2":["vendor: http://www.debian.org/security/2012/dsa-2377"],"cyrus-imapd-2.4":["upstream: http://git.cyrusimap.org/cyrus-imapd/commit/?id=6e776956a1a9dfa58eacdd0ddd52644009eac9e5"],"kolab-cyrus-imapd":[]},"tags":{},"packages":[{"name":"cyrus-imapd-2.2","source":"https://ubuntu.com/security/cve?package=cyrus-imapd-2.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cyrus-imapd-2.2","debian":"https://tracker.debian.org/pkg/cyrus-imapd-2.2","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"2.2.13-19squeeze3build0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"2.2.13-19squeeze3build0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"cyrus-imapd-2.4","source":"https://ubuntu.com/security/cve?package=cyrus-imapd-2.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cyrus-imapd-2.4","debian":"https://tracker.debian.org/pkg/cyrus-imapd-2.4","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.11","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.12-2]","component":null,"pocket":"security"}]},{"name":"kolab-cyrus-imapd","source":"https://ubuntu.com/security/cve?package=kolab-cyrus-imapd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kolab-cyrus-imapd","debian":"https://tracker.debian.org/pkg/kolab-cyrus-imapd","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-3208","published":"2011-09-14T17:17:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nStack-based buffer overflow in the split_wildmats function in nntpd.c in\nnntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows\nremote attackers to execute arbitrary code via a crafted NNTP command.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-3208"],"bugs":["https://bugs.launchpad.net/ubuntu/+source/cyrus-imapd-2.2/+bug/880914"],"patches":{"cyrus-imapd-2.2":["vendor: http://anonscm.debian.org/gitweb/?p=pkg-cyrus-imapd/cyrus-imapd-2.2.git;a=blob;f=debian/patches/CVE-2011-3208.patch","vendor: http://www.debian.org/security/2011/dsa-2318"],"cyrus-imapd-2.4":[],"kolab-cyrus-imapd":[]},"tags":{},"packages":[{"name":"cyrus-imapd-2.2","source":"https://ubuntu.com/security/cve?package=cyrus-imapd-2.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cyrus-imapd-2.2","debian":"https://tracker.debian.org/pkg/cyrus-imapd-2.2","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"2.2.13-19squeeze2build0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"2.2.13-19squeeze2build0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"cyrus-imapd-2.4","source":"https://ubuntu.com/security/cve?package=cyrus-imapd-2.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cyrus-imapd-2.4","debian":"https://tracker.debian.org/pkg/cyrus-imapd-2.4","statuses":[{"release_codename":"vivid","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"2.4.12-2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.11","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.16-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.16-1]","component":null,"pocket":"security"}]},{"name":"kolab-cyrus-imapd","source":"https://ubuntu.com/security/cve?package=kolab-cyrus-imapd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kolab-cyrus-imapd","debian":"https://tracker.debian.org/pkg/kolab-cyrus-imapd","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-2201","published":"2011-09-14T16:05:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe Data::FormValidator module 4.66 and earlier for Perl, when\nuntaint_all_constraints is enabled, does not properly preserve the taint\nattribute of data, which might allow remote attackers to bypass the taint\nprotection mechanism via form input.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-2201"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511"],"patches":{"libdata-formvalidator-perl":[]},"tags":{},"packages":[{"name":"libdata-formvalidator-perl","source":"https://ubuntu.com/security/cve?package=libdata-formvalidator-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libdata-formvalidator-perl","debian":"https://tracker.debian.org/pkg/libdata-formvalidator-perl","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"4.66-3","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"4.66-3","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"4.66-3","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"4.66-3","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"4.66-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2010-4340","published":"2011-09-12T12:41:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nlibcloud before 0.4.1 does not verify SSL certificates for HTTPS\nconnections, which allows remote attackers to spoof certificates and bypass\nintended access restrictions via a man-in-the-middle (MITM) attack.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2010-4340"],"bugs":[""],"patches":{"libcloud":[]},"tags":{},"packages":[{"name":"libcloud","source":"https://ubuntu.com/security/cve?package=libcloud","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libcloud","debian":"https://tracker.debian.org/pkg/libcloud","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"0.5.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"0.5.0-1build1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"0.5.0-1build1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"0.5.0-1build1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"0.5.0-1build1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.5.0-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-3421","published":"2011-09-12T12:40:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple unspecified vulnerabilities in Google Chrome before 14.0.835.125\non the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have\nunknown impact and attack vectors.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-3421"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[],"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"vivid","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"14.0.835.202~r103287-0ubuntu0.10.04.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"14.0.835.202~r103287-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"14.0.835.202~r103287-0ubuntu0.11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [14.0.835.202~r103287-0ubuntu1]","component":null,"pocket":"security"}]},{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-3420","published":"2011-09-12T12:40:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple unspecified vulnerabilities in Google Chrome before 14.0.835.157\non the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have\nunknown impact and attack vectors.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-3420"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[],"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"14.0.835.202~r103287-0ubuntu0.10.04.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"14.0.835.202~r103287-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"14.0.835.202~r103287-0ubuntu0.11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"14.0.835.202~r103287-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [14.0.835.202~r103287-0ubuntu1]","component":null,"pocket":"security"}]},{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-3354","published":"2011-09-09T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before\n0.7.3 allows remote attackers to cause a denial of service (crash) via a\ncrafted Client-To-Client Protocol (CTCP) request, as demonstrated in the\nwild in September 2011.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"remote DoS being actively exploited\nCVE requested on oss-security"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2011/09/08/7","https://ubuntu.com/security/notices/USN-1200-1","https://www.cve.org/CVERecord?id=CVE-2011-3354"],"bugs":["https://bugs.launchpad.net/ubuntu/oneiric/+source/quassel/+bug/845707"],"patches":{"quassel":["other: http://git.quassel-irc.org/?p=quassel.git;a=commit;h=da215fcb9cd3096a3e223c87577d5d4ab8f8518b"]},"tags":{},"packages":[{"name":"quassel","source":"https://ubuntu.com/security/cve?package=quassel","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quassel","debian":"https://tracker.debian.org/pkg/quassel","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"0.6.1-0ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"0.7.1-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"0.7.2-0ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.7.3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":70720,"limit":20,"total_results":79316}