OSVDB: Open Sourced Vulnerability Database

Creditee: Makoto Shiotsuki

Known Contact Information:

(as of 2010-11-01)

Known Affiliations:

Hitachi Incident Response Team (as of 2010-10-11)
Security Professionals Network, Inc. (as of 2010-11-01)
JPCERT/CC (as of 2011-03-25)

Disclosed Vulnerabilities (17):

Disc. Date	OSVDB ID	CVEID	Title
2011-08-09	74494	2011-1961	Microsoft IE Crafted Link Telnet URI Handler Remote Program Execution
2011-03-25	71281	2011-0458	Google Picasa Path Subversion Arbitrary DLL Injection Code Execution
2011-02-18	71413	2011-0452	Lunascape Path Subversion Arbitrary DLL Injection Code Execution
2011-01-27	70726	2011-0450	Opera on Windows Downloads Manager Filesystem Viewing Application Pathname Verification Weakness Arbitrary Code Execution
2011-01-21	70604	2010-3927	Lunascape Path Subversion Arbitrary DLL Injection Code Execution
2010-11-01	68958	2010-3914	GVim Path Subversion Arbitrary DLL Injection Code Execution
2010-10-22	68916	2010-3163 2010-3164	Sleipnir Path Subversion Arbitrary DLL Injection Code Execution
2010-10-22	68917	2010-3165	YokkaSoft Products Path Subversion Arbitrary EXE Injection Code Execution
2010-10-21	68768	2010-3162	Apsaly Path Subversion Arbitrary DLL Injection Code Execution
2010-10-20	68731	2010-3160	Archive Decoder Path Subversion Arbitrary Executable Injection Code Execution
2010-10-19	68727	2010-3159	Explzh Path Subversion Arbitrary DLL Injection Code Execution
2010-10-18	68766	2010-3161	TeraPad Path Subversion Arbitrary DLL Injection Code Execution
2010-10-14	68697	2010-3157	XacRett Path Subversion Arbitrary Executable Injection Code Execution
2010-10-11	68616	2010-2368	Lhaplus Path Subversion Arbitrary DLL Injection Code Execution
2010-10-11	68735	2010-3158	Lhaplus Path Subversion Arbitrary Executable Injection Code Execution
2010-10-10	68611	2010-2369	Lhasa Path Subversion Executable File Injection Arbitrary Code Execution
2010-10-10	68699	2010-3156	K2Editor Path Subversion Arbitrary Executable Injection Code Execution

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.