Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0934 State: PUBLISHED Published: 2008-02-25T18:00:00 Last Updated: 2024-08-07T08:01:40.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5172 - http://www.securityfocus.com/bid/27937
CVE ID: CVE-2008-0935 State: PUBLISHED Published: 2008-02-25T18:00:00 Last Updated: 2024-08-07T08:01:40.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to execute arbitrary code via a long argument to the ExecuteRequest method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0639 - http://www.securityfocus.com/bid/27939 - http://download.novell.com/Download?buildid=prBBH4JpImA~ - http://www.securitytracker.com/id?1019489 - http://secunia.com/advisories/27994
CVE ID: CVE-2008-0936 State: PUBLISHED Published: 2008-02-25T18:00:00Z Last Updated: 2024-09-16T20:26:37.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29063 - http://marc.info/?l=bugtraq&m=120362358919492&w=2 - http://www.securityfocus.com/bid/27934
CVE ID: CVE-2008-0937 State: PUBLISHED Published: 2008-02-25T18:00:00Z Last Updated: 2024-09-16T20:32:05.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27931 - http://marc.info/?l=bugtraq&m=120361694407815&w=2 - http://secunia.com/advisories/29073
CVE ID: CVE-2008-0938 State: PUBLISHED Published: 2008-02-25T18:00:00 Last Updated: 2024-08-07T08:01:40.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27942 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231803-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A545
t.do?assetkey=1-26-231803-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5451 - http://www.securitytracker.com/id?1019483 - http://secunia.com/advisories/29037 - http://www.vupen.com/english/advisories/2008/0640
CVE ID: CVE-2008-0939 State: PUBLISHED Published: 2008-02-25T20:00:00 Last Updated: 2024-08-07T08:01:40.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0586 - http://securityr
alyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0586 - http://securityreason.com/securityalert/3693 - http://www.securityfocus.com/archive/1/488290 - http://www.securityfocus.com/bid/27832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40599 - https://www.exploit-db.com/exploits/5135 - http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/ - http://me.mywebsight.ws/web/wppa/ - http://secunia.com/advisories/28988
CVE ID: CVE-2008-0940 State: PUBLISHED Published: 2008-02-25T20:00:00Z Last Updated: 2024-09-16T22:14:36.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28967 - http://www.securityfocus.com/bid/27869 - http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released
CVE ID: CVE-2008-0941 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40756 - http://secunia.com/advisories/29053 - http://www.securityfocus.com/bid/27924 - http://securityreason.com/securityalert/3694 - http://www.securityfocus.com/archive/1/488430/100/0/threaded
CVE ID: CVE-2008-0942 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488456/100/0/threaded - http://securityreason.com/securityalert/3695 - http://www.securityfocus.com/bid/27924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40847
CVE ID: CVE-2008-0943 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488428/100/0/threaded - http://secunia.com/advisories/29053 - http://www.securityfocus.com/bid/27924 - http://securityreason.com/securityalert/3696 - https://exchange.xfor
es/29053 - http://www.securityfocus.com/bid/27924 - http://securityreason.com/securityalert/3696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40757
CVE ID: CVE-2008-0944 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ipsimene-adv.txt - http://www.securityfocus.com/archive/1/487748/100/200/threaded - http://www.securityfocus.com/bid/27677 - http://securityreason.com/securityalert/3697 - http://secunia.com/advisories/28824
CVE ID: CVE-2008-0945 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ipsimene-adv.txt - http://www.securityfocus.com/archive/1/487748/100/200/threaded - http://www.securityfocus.c
a.org/adv/ipsimene-adv.txt - http://www.securityfocus.com/archive/1/487748/100/200/threaded - http://www.securityfocus.com/bid/27677 - http://securityreason.com/securityalert/3697 - http://aluigi.org/poc/ipsimene.zip - http://secunia.com/advisories/28824
CVE ID: CVE-2008-0946 State: PUBLISHED Published: 2008-02-25T21:00:00 Last Updated: 2024-08-07T08:01:40.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ipsimene-adv.txt - http://www.securityfocus.com/archive/1/487748/100/200/threaded - http://www.securityfocus.com/bid/27677 - http://securityreason.com/securityalert/3697 - http://aluigi.org/poc
threaded - http://www.securityfocus.com/bid/27677 - http://securityreason.com/securityalert/3697 - http://aluigi.org/poc/ipsimene.zip
CVE ID: CVE-2008-0947 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:01:40.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3752 - http://www.us-cert.gov/cas/techalerts/TA08-079B.html - http://secunia.com/advisories/29457 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:069 - http://www.securityfocus.com/archive/1/489784/10
457 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:069 - http://www.securityfocus.com/archive/1/489784/100/0/threaded - http://secunia.com/advisories/29464 - http://www.securityfocus.com/bid/28302 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html - http://wiki.rpath.com/Advisories:rPSA-2008-0112 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://secunia.com/advisories/29451 - http://secunia.com/advisories/29663 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 -
.com/archives/fedora-package-announce/2008-March/msg00544.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 - http://secunia.com/advisories/29438 - http://www.redhat.com/support/errata/RHSA-2008-0164.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:070 - http://www.vupen.com/english/advisories/2008/0922/references - http://secunia.com/advisories/29435 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10984 - http://www.securityfocus.com/archive/1/489883/100/0/threaded - http://secunia.com/advisories/29428 - http://www.debian.org/security/2008/dsa-1524 - http://www.securityfocus.com/archive/1/489762/100/0/threaded - http://sup
http://www.debian.org/security/2008/dsa-1524 - http://www.securityfocus.com/archive/1/489762/100/0/threaded - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html - http://secunia.com/advisories/29516 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt - http://secunia.com/advisories/29462 - http://secunia.com/advisories/29424 - http://www.securitytracker.com/id?1019631 - http://www.ubuntu.com/usn/usn-587-1 - http://www.vupen.com/english/advisories/2008/1102/references - http://security.gentoo.org/glsa/glsa-200803-31.xml - http://marc.info/?l=bugtraq&m=130497213107107&w=2
1102/references - http://security.gentoo.org/glsa/glsa-200803-31.xml - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://www.kb.cert.org/vuls/id/374121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41273
CVE ID: CVE-2008-0948 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:01:40.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3752 - https://oval.cisecurity.org
Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3752 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9209 - http://www.us-cert.gov/cas/techalerts/TA08-079B.html - http://www.vupen.com/english/advisories/2008/1744 - http://www.securityfocus.com/archive/1/489784/100/0/threaded - http://www.securityfocus.com/bid/28302 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://secunia.com/advisories/29663 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41274 -
//www.vmware.com/security/advisories/VMSA-2008-0009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41274 - http://www.vupen.com/english/advisories/2008/0922/references - http://secunia.com/advisories/29428 - http://secunia.com/advisories/30535 - http://www.securityfocus.com/archive/1/489762/100/0/threaded - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html - http://www.securityfocus.com/archive/1/493080/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt - http://secunia.com/advisories/29424 - http://www.redhat.com/support/errata/RHSA-2008-0
isories/MITKRB5-SA-2008-002.txt - http://secunia.com/advisories/29424 - http://www.redhat.com/support/errata/RHSA-2008-0181.html - http://www.securitytracker.com/id?1019631 - http://secunia.com/advisories/29423 - http://www.vupen.com/english/advisories/2008/1102/references - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://www.kb.cert.org/vuls/id/374121
CVE ID: CVE-2008-0949 State: PUBLISHED Published: 2008-03-18T00:00:00 Last Updated: 2024-08-07T08:01:40.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41370 - http://www-1.ibm.com/support/search.wss?rs=0&q=IC55224&apar=only - http://www.securityfocus.com/bid/28198 - http://www.informixmag.com/content/view/11144/27/ - http://www-1.ibm.com/support
ttp://www.securityfocus.com/bid/28198 - http://www.informixmag.com/content/view/11144/27/ - http://www-1.ibm.com/support/search.wss?rs=0&q=IC55225&apar=only - http://www.informixmag.com/content/view/11143/27/ - http://secunia.com/advisories/29272
CVE ID: CVE-2008-0951 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:01:40.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41349 - http://www.se
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41349 - http://www.securityfocus.com/bid/28360 - http://www.kb.cert.org/vuls/id/889747 - http://www.securitytracker.com/id?1020446 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038 - http://www.vupen.com/english/advisories/2008/0954/references - http://secunia.com/advisories/29458
CVE ID: CVE-2008-0952 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:01:40.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - h
s: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.kb.cert.org/vuls/id/190939 - http://www.securityfocus.com/bid/29526 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/42834 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29535
CVE ID: CVE-2008-0953 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:01:40.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29533 - http://www.securityfocus
com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29533 - http://www.securityfocus.com/bid/29526 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.kb.cert.org/vuls/id/998779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42851 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2008-0955 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:01:40.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42673 - http://www.kb.cert.org/vuls/id/501843 - http://www.securityfocus.com/bid/29391 - http://secunia.com/advisories/30403 - https://www.exploit-db.com/exploits/5681
CVE ID: CVE-2008-0956 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T08:01:40.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/216153 - http://www.vupen.com/english/advisories/2008/1791 - http://www.securityfocus.com/bid/29558 - http://www.us-cert.go
153 - http://www.vupen.com/english/advisories/2008/1791 - http://www.securityfocus.com/bid/29558 - http://www.us-cert.gov/cas/techalerts/TA08-162B.html - http://www.vupen.com/english/advisories/2008/1792 - http://secunia.com/advisories/30625 - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - http://secunia.com/advisories/30598 - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42991 - http://backweb.com/news_events/press_releases/051608.php
CVE ID: CVE-2008-0957 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:01:40.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remote attackers to execute arbitrary code via unspecified initialization parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42534 - http://www.securityfocus.com/bid/29279 - http://www.kb.cert.org/vuls/id/406937 - http://www.vupen.com/english/advisories/2008/1571
CVE ID: CVE-2008-0958 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:01:40.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30451 - http://www.vupen.com/english/advisories/2008/1669 - http://secunia.com/advisories/30454 - http://secunia.com/advisories/30414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42678 - http://secunia.com/advisories/
cunia.com/advisories/30414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42678 - http://secunia.com/advisories/30453 - http://secunia.com/advisories/30458 - http://secunia.com/advisories/30452 - http://www.kb.cert.org/vuls/id/656593
CVE ID: CVE-2008-0959 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:01:40.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30395 - http://secunia.com/advisories/30419 - https