Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cus.com/archive/1/473630/100/0/threaded - http://www.securityfocus.com/bid/24894 - http://www.osvdb.org/36511 - http://secunia.com/advisories/26063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35390
CVE ID: CVE-2007-3014 State: PUBLISHED Published: 2007-07-15T23:00:00 Last Updated: 2024-08-07T13:57:54.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) errors/rights.asp or (2) errors/transaction.asp, or (3) the name of a MIME type (mimetype). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24896 - http://www.osvdb.org/36259 - http://www.securityfocus.com/archive/1/473631/100/0/threaded - http://www.osvdb.org/36261 - http://www.securityfocus.co
http://www.securityfocus.com/archive/1/473631/100/0/threaded - http://www.osvdb.org/36261 - http://www.securityfocus.com/bid/24895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35389 - http://www.osvdb.org/36260 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-005.php - http://secunia.com/advisories/26063
CVE ID: CVE-2007-3017 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T13:57:54.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35399 - http://www.securityfocus.com/archive/1/473627/100/0/threaded - http://securityreason.com/securityalert/2900 - http://www.
ttp://www.securityfocus.com/archive/1/473627/100/0/threaded - http://securityreason.com/securityalert/2900 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-006.php - http://secunia.com/advisories/26063 - http://www.securityfocus.com/bid/24898 - http://osvdb.org/39745
CVE ID: CVE-2007-3018 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T13:57:54.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted accounts, which allows these editors to create files in arbitrary directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24900 - http://osvdb.org/39746 - http://www.securityfocus.com/archive/1/473629/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35400 - http://securityreason.com/securityalert/2899 - http://www.redteam-pentesting.de/ad
.ibmcloud.com/vulnerabilities/35400 - http://securityreason.com/securityalert/2899 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-007.php - http://secunia.com/advisories/26063
CVE ID: CVE-2007-3021 State: PUBLISHED Published: 2007-06-05T21:00:00 Last Updated: 2024-08-07T13:57:54.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2007.06.05a.html - http://www.securityfocus.com/bid/2
r: References: - http://www.symantec.com/avcenter/security/Content/2007.06.05a.html - http://www.securityfocus.com/bid/24313 - http://osvdb.org/36109 - http://www.securitytracker.com/id?1018196 - http://www.vupen.com/english/advisories/2007/2074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34744 - http://secunia.com/advisories/25543
CVE ID: CVE-2007-3022 State: PUBLISHED Published: 2007-06-05T21:00:00 Last Updated: 2024-08-07T13:57:54.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34740 - http://www.securityfocus.com/bid/24312 - http://osvdb.org/36108 - http:/
nge.xforce.ibmcloud.com/vulnerabilities/34740 - http://www.securityfocus.com/bid/24312 - http://osvdb.org/36108 - http://www.symantec.com/avcenter/security/Content/2007.06.05.html - http://www.securitytracker.com/id?1018196 - http://www.vupen.com/english/advisories/2007/2074 - http://secunia.com/advisories/25543
CVE ID: CVE-2007-3023 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T13:57:54.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36908 - http://secunia.com/advisories/25796 - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=464
m/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=464 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://secunia.com/advisories/25688 - http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html - http://www.securityfocus.com/bid/24358 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://security.gentoo.org/glsa/glsa-200706-05.xml
CVE ID: CVE-2007-3024 State: PUBLISHED Published: 2007-06-07T22:00:00 Last Updated: 2024-08-07T13:57:55.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in clamd/clamdscan, which might allow local users to read sensitive files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25796 - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320
http://secunia.com/advisories/25525 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://secunia.com/advisories/25688 - http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=517 - http://www.securityfocus.com/bid/24358 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://security.gentoo.org/glsa/glsa-200706-05.xml
CVE ID: CVE-2007-3025 State: PUBLISHED Published: 2007-06-07T22:00:00Z Last Updated: 2024-09-17T03:08:16.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service (hang) via unknown vectors related to the isURL function and regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25525 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html
CVE ID: CVE-2007-3026 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T13:57:54.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38614 - http://secunia.com/advisories/26157 - http://securityreason.com/securityalert/2917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35600 - http://www.securityfocus.com/archive/1/474551/100/0/threaded - http://www.vupen
rce.ibmcloud.com/vulnerabilities/35600 - http://www.securityfocus.com/archive/1/474551/100/0/threaded - http://www.vupen.com/english/advisories/2007/2641 - http://www.securitytracker.com/id?1018446 - http://www.securityfocus.com/bid/25046 - http://www.zerodayinitiative.com/advisories/ZDI-07-041.html
CVE ID: CVE-2007-3027 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T13:57:54.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471209/100/0/threaded - http://secunia.com/advisories/25627 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://securitytracker.com/id?1018235
advisories/25627 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://securitytracker.com/id?1018235 - http://www.securityfocus.com/bid/24429 - http://www.vupen.com/english/advisories/2007/2153 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://osvdb.org/35350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34621 - http://www.zerodayinitiative.com/advisories/ZDI-07-037.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1902 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-3028 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:57:55.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bu
CVE-2007-0040. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securityfocus.com/bid/24796 - http://www.securitytracker.com/id?1018355 - http://secunia.com/advisories/26002 - http://www.vupen.com/english/advisories/2007/2481 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://www.kb.cert.org/vuls/id/348953 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1856
CVE ID: CVE-2007-3029 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:57:55.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securitytracker.com/id?1018352 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-036 - http://osvdb.org/35958 - http://www.v
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-036 - http://osvdb.org/35958 - http://www.vupen.com/english/advisories/2007/2478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35215 - http://www.securityfocus.com/bid/22555 - http://secunia.com/advisories/25995 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2029
CVE ID: CVE-2007-3030 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:57:54.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17
ugtraq/2007/07/msg00254.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1709 - http://www.securitytracker.com/id?1018352 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-036 - http://www.securityfocus.com/bid/24803 - http://osvdb.org/35959 - http://www.vupen.com/english/advisories/2007/2478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35217 - http://secunia.com/advisories/25995 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html
CVE ID: CVE-2007-3031 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-3032 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T13:57:55.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26439 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://www.vupen.com/english/advisories/2007/2872 - http://www.kb.cert.org/vuls/id/121024 - http://www.securitytracker.com/id?1018566 - https://oval.cis
isories/2007/2872 - http://www.kb.cert.org/vuls/id/121024 - http://www.securitytracker.com/id?1018566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2115 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-048 - http://www.securityfocus.com/bid/25304
CVE ID: CVE-2007-3033 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T13:57:54.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26439 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=
://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=575 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2152 - http://www.vupen.com/english/advisories/2007/2872 - http://www.securitytracker.com/id?1018566 - http://www.kb.cert.org/vuls/id/558648 - http://www.securityfocus.com/bid/25287 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-048
CVE ID: CVE-2007-3034 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:57:54.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-046 - http://www.securityfocus.com/archive/1/476505/100/0/threaded - http://www.us-cert.g
es/securitybulletins/2007/ms07-046 - http://www.securityfocus.com/archive/1/476505/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://www.kb.cert.org/vuls/id/640136 - http://secunia.com/advisories/26423 - http://www.securitytracker.com/id?1018563 - http://www.securityfocus.com/bid/25302 - http://www.vupen.com/english/advisories/2007/2870 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2088
CVE ID: CVE-2007-3035 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:57:54.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25305 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1352 - http://www.us-
bid/25305 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1352 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://secunia.com/advisories/26433 - http://www.zerodayinitiative.com/advisories/ZDI-07-047.html - http://securitytracker.com/id?1018565 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047 - http://www.securityfocus.com/archive/1/476548/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35895 - http://www.vupen.com/english/advisories/2007/2871
CVE ID: CVE-2007-3036 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T13:57:54.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018678 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-053 - http://www.osvdb.org/36935 - http://www.securityfocus.com/bid/2
en-us/security-updates/securitybulletins/2007/ms07-053 - http://www.osvdb.org/36935 - http://www.securityfocus.com/bid/25620 - http://www.us-cert.gov/cas/techalerts/TA07-254A.html - http://www.vupen.com/english/advisories/2007/3115 - http://secunia.com/advisories/26757 - http://www.kb.cert.org/vuls/id/768440 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1275
CVE ID: CVE-2007-3037 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:57:54.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://secunia.com/advisories/26433 - http://www.osvdb.org/36385 - h
p://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://secunia.com/advisories/26433 - http://www.osvdb.org/36385 - http://securitytracker.com/id?1018565 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047 - http://www.vupen.com/english/advisories/2007/2871 - http://www.zerodayinitiative.com/advisories/ZDI-07-046.html - http://www.securityfocus.com/bid/25307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2207 - http://www.securityfocus.com/archive/1/476533/100/0/threaded
CVE ID: CVE-2007-3038 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:57:54.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35322 - http://www.vu
-stuttgart.de/bugtraq/2007/07/msg00254.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35322 - http://www.vupen.com/english/advisories/2007/2480 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt - http://www.securityfocus.com/bid/24779 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884 - http://www.securityfocus.com/archive/1/473294/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038 - http://www.kb.cert.org/vuls/id/101321 - http://www.securitytracker.com/id?1018354 - http://osvdb.org/35952 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://secunia.c
racker.com/id?1018354 - http://osvdb.org/35952 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://secunia.com/advisories/26001
CVE ID: CVE-2007-3039 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T13:57:54.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4934 - https://www.exploit-db.com/exploits/4760 - https://www.exploit-db.com/exploits/4745 - https://oval.c
com/exploits/4934 - https://www.exploit-db.com/exploits/4760 - https://www.exploit-db.com/exploits/4745 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.securitytracker.com/id?1019077 - http://secunia.com/advisories/28011 - http://www.securityfocus.com/bid/26797 - http://www.zerodayinitiative.com/advisories/ZDI-07-076.html - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065 - http://www.vupen.com/english/advisories/2007/4181
icrosoft.com/en-us/security-updates/securitybulletins/2007/ms07-065 - http://www.vupen.com/english/advisories/2007/4181 - http://www.securityfocus.com/archive/1/484891/100/0/threaded - http://secunia.com/advisories/28051