OSVDB: The Open Source Vulnerability Database

Creditee: Jouko Pynnonen

Known Contact Information:

(as of 2003-07-29)

Known Affiliations:

iDefense Labs VCP (as of 2003-07-29)

Disclosed Vulnerabilities (5):

Disc. Date	OSVDB ID	CVEID	Title
2004-11-22	12095	2004-1029	Sun Java JRE Plug-in Capability Arbitrary Package Access
2004-06-23	7267	2004-0480	IBM Lotus Notes URI Handler Argument Injection
2004-04-13	5253	2003-0907	Microsoft Windows Help and Support Center Command Execution
2004-03-09	4168	2004-0121	Microsoft Outlook 2002 mailto URI Script Injection
2003-07-29	8722	2003-0609	Solaris ld.so.1 LD_PRELOAD Variable Local Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.