mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
118 lines
3.7 KiB
JSON
118 lines
3.7 KiB
JSON
{
|
|
"id": "CVE-2009-5098",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2011-09-13T19:59:25.440",
|
|
"lastModified": "2018-10-10T19:49:38.327",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "El proceso LunaSysMgr en Palm WebOS pre v1.1 y anteriores, cuando no se visualizan las p\u00e1ginas web en modo horizontal, permite a atacantes remotos causar una denegaci\u00f3n de servicio (crash) a trav\u00e9s de una p\u00e1gina web que contiene una cadena demasiado larga despu\u00e9s de una etiqueta de refresco, lo que desencadena una excepci\u00f3n de coma flotante."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "HIGH",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"baseScore": 5.4
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 4.9,
|
|
"impactScore": 6.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-399"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.1.0",
|
|
"matchCriteriaId": "26D8E6DF-FA92-4A14-8701-8049BA053F2E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9B50EAFC-68AC-4E87-9ADD-032C8432E6D1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A912CC8D-70EF-4D69-96D9-899D8B91CC3C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "07ABE032-0F75-446D-802C-8448D004DD3C"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/36936",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://securityreason.com/securityalert/8373",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating.html",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Exploit"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/archive/1/507126/100/0/threaded",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |