Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5021 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:17.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.debian.org/security/2009/
rogram Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.debian.org/security/2009/dsa-1697 - http://www.debian.org/security/2008/dsa-1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://secunia.com/advisories/32713 - http://www.redhat.com/support/errata/RHSA-2008-0977.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/32695 - http://www.redhat.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778
support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - http://www.redhat.com/support/errata/RHSA-2008-0976.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://secunia.com/advisories/33433 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.mozilla.org/security/announce/2008/mfsa2008-55.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://secunia.com/advisories/32694 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - https://bugzilla.mozilla.org/show_bug.cgi?id=460002 -
es/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - https://bugzilla.mozilla.org/show_bug.cgi?id=460002 - http://secunia.com/advisories/32853 - http://www.debian.org/security/2009/dsa-1696 - http://www.securitytracker.com/id?1021186 - http://secunia.com/advisories/32715 - http://secunia.com/advisories/32693 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:235 - http://secunia.com/advisories/33434 - http://secunia.com/advisories/32798 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - https://oval.cisecurity.org/repository/search/definition/
cunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642 - http://secunia.com/advisories/32714 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5022 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.mozilla.org/security/announce/2008/mfsa2008-56.html - http://www.debian.org/security
h/advisories/2008/3146 - http://www.mozilla.org/security/announce/2008/mfsa2008-56.html - http://www.debian.org/security/2009/dsa-1697 - http://www.debian.org/security/2008/dsa-1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://secunia.com/advisories/32713 - http://www.redhat.com/support/errata/RHSA-2008-0977.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/32695 - http://www.redhat.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/
t.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - http://www.redhat.com/support/errata/RHSA-2008-0976.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://secunia.com/advisories/33433 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://secunia.com/advisories/32694 - http://www.securitytracker.com/id?1021188 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/te
/32694 - http://www.securitytracker.com/id?1021188 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - https://bugzilla.mozilla.org/show_bug.cgi?id=460002 - http://secunia.com/advisories/32853 - http://www.debian.org/security/2009/dsa-1696 - http://secunia.com/advisories/32715 - http://secunia.com/advisories/32693 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:235 - http://secunia.com/advisories/33434 - http://secunia.com/advisories/32798 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/ad
nia.com/advisories/32798 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/advisories/32714 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5023 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.debian.org/security/2008/dsa-1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/ms
1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://secunia.com/advisories/32713 - http://www.redhat.com/support/errata/RHSA-2008-0977.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/32695 - http://www.redhat.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - http://www.mozilla.org/security/announce/2008/mfsa2008-57.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://www.securit
a2008-57.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://www.securitytracker.com/id?1021189 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://secunia.com/advisories/32694 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - https://bugzilla.mozilla.org/show_bug.cgi?id=424733 - http://secunia.com/advisories/32853 - http://secunia.com/advisories/32693 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://secunia.com/advisories/32684 - http:/
rity/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/advisories/32714 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9908 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5024 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:17.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=453915 - http://www.d
3146 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=453915 - http://www.debian.org/security/2008/dsa-1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://secunia.com/advisories/32713 - http://www.redhat.com/support/errata/RHSA-2008-0977.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/32695 - http://www.redhat.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - http://www.redhat.com
8-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - http://www.redhat.com/support/errata/RHSA-2008-0976.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://secunia.com/advisories/33433 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://secunia.com/advisories/32694 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - http://secunia.com/advisories/32853 - http://www.debian.org/security/2009/dsa-1696 - http://www.securitytracker.com/id?1021192 - https://oval.
isories/32853 - http://www.debian.org/security/2009/dsa-1696 - http://www.securitytracker.com/id?1021192 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063 - http://secunia.com/advisories/32715 - http://secunia.com/advisories/32693 - http://www.mozilla.org/security/announce/2008/mfsa2008-58.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:235 - http://secunia.com/advisories/33434 - http://secunia.com/advisories/32798 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/advisories/32714 - ht
32798 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/advisories/32714 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5025 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:40:16.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://openwall.com/lists/oss-security/2008/11/10/6 - http://openwall.com/lists/oss-security/2008/11/11/12 - http://openwal
p://openwall.com/lists/oss-security/2008/11/10/6 - http://openwall.com/lists/oss-security/2008/11/11/12 - http://openwall.com/lists/oss-security/2008/11/10/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:246 - http://secunia.com/advisories/33641 - http://openwall.com/lists/oss-security/2008/11/11/1 - http://secunia.com/advisories/32719 - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://openwall.com/lists/oss-security/2008/11/10/7 - http://secunia.com/advisories/33556 - http://www.debian.org/security/2008/dsa-1687 - http://rhn.redhat.com/errata/RHSA-2009-0264.html - https://bugzilla.redhat.com/show_bug.cgi?id=470769 - http://secunia.com/advisories/32918 - http
ta/RHSA-2009-0264.html - https://bugzilla.redhat.com/show_bug.cgi?id=470769 - http://secunia.com/advisories/32918 - http://secunia.com/advisories/33858 - http://www.ubuntu.com/usn/usn-679-1 - http://osvdb.org/49863 - http://openwall.com/lists/oss-security/2008/11/10/3 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=d38b7aa7fc3371b52d036748028db50b585ade2e - http://secunia.com/advisories/33180 - http://www.securitytracker.com/id?1021230 - http://www.securityfocus.com/bid/32289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46605 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470 - http://secunia.com/advis
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470 - http://secunia.com/advisories/33704 - http://www.debian.org/security/2008/dsa-1681 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-5026 State: PUBLISHED Published: 2008-11-10T15:00:00 Last Updated: 2024-08-07T10:40:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-11/0056.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46590 - http://archives.neohapsis.co
es/bugtraq/2008-11/0056.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46590 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0055.html - http://www.pomcor.com/whitepapers/file_sharing_security.pdf - http://archives.neohapsis.com/archives/bugtraq/2008-11/0058.html
CVE ID: CVE-2008-5027 State: PUBLISHED Published: 2008-11-10T15:00:00 Last Updated: 2024-08-07T10:40:17.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel - http://www.vupen.com/english/advisories/2008/3364 - http://security.gentoo.org/glsa/glsa-200907-15.xml -
nagios-devel - http://www.vupen.com/english/advisories/2008/3364 - http://security.gentoo.org/glsa/glsa-200907-15.xml - http://www.nagios.org/development/history/nagios-3x.php - http://secunia.com/advisories/33320 - http://www.openwall.com/lists/oss-security/2008/11/06/2 - http://www.securityfocus.com/bid/32156 - http://www.securitytracker.com/id?1022165 - https://www.ubuntu.com/usn/USN-698-3/ - http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor - http://www.vupen.com/english/advisories/2008/3029 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.vupen.com/english/advisories/2009/1256 - http:/
637&w=2 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.vupen.com/english/advisories/2009/1256 - http://www.ubuntu.com/usn/USN-698-1 - http://secunia.com/advisories/35002
CVE ID: CVE-2008-5028 State: PUBLISHED Published: 2008-11-10T15:00:00 Last Updated: 2024-08-07T10:40:16.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46426 - http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel - https://exchange.xforce.ibmcl
.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel - https://exchange.xforce.ibmcloud.com/vulnerabilities/46521 - http://security.gentoo.org/glsa/glsa-200907-15.xml - http://secunia.com/advisories/33320 - http://git.op5.org/git/?p=nagios.git%3Ba=commit%3Bh=814d8d4d1a73f7151eeed187c0667585d79fea18 - http://www.openwall.com/lists/oss-security/2008/11/06/2 - http://www.securitytracker.com/id?1022165 - https://www.ubuntu.com/usn/USN-698-3/ - http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor - http://www.vupen.com/english/advisories/2008/3029 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://marc.info/?l=bugtraq&m
pen.com/english/advisories/2008/3029 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.vupen.com/english/advisories/2009/1256 - http://secunia.com/advisories/32610 - http://secunia.com/advisories/32630 - http://secunia.com/advisories/35002 - http://osvdb.org/49678
CVE ID: CVE-2008-5029 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://www.openwall.com/lists/oss-security/2008/11/06/1 - http://www.mandriva.com/s
ttp://secunia.com/advisories/32998 - http://www.openwall.com/lists/oss-security/2008/11/06/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:234 - http://www.redhat.com/support/errata/RHSA-2009-0225.html - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/advisories/33641 - http://securityreason.com/securityalert/4573 - http://secunia.com/advisories/33623 - http://www.redhat.com/support/errata/RHSA-2009-0009.html - http://www.securitytracker.com/id?1021292 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558 - http://www.securitytracker.com/id?1021511 - http://www.redhat.com/support/errata/RHSA-2009-0014.h
re.oval%3Adef%3A9558 - http://www.securitytracker.com/id?1021511 - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://secunia.com/advisories/33586 - http://marc.info/?l=linux-netdev&m=122593044330973&w=2 - http://secunia.com/advisories/33556 - http://www.securityfocus.com/bid/32154 - http://www.debian.org/security/2008/dsa-1687 - http://secunia.com/advisories/32918 - http://www.securityfocus.com/archive/1/499744/100/0/threaded - http://www.ubuntu.com/usn/usn-679-1 - http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46538 - http://secunia.com/advisories/33180 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - ht
com/vulnerabilities/46538 - http://secunia.com/advisories/33180 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - http://darkircop.org/unix.c - https://bugzilla.redhat.com/show_bug.cgi?id=470201 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html - http://www.securityfocus.com/archive/1/499700/100/0/threaded - http://secunia.com/advisories/33704 - http://www.debian.org/security/2008/dsa-1681 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694 - http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html - http://www.securityfocus.com/bid/33079 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.h
.html - http://www.securityfocus.com/bid/33079 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-5030 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46392 - http://secunia.com/advisories/32678 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - http://www.openwall.com/lis
isories/32678 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - http://www.openwall.com/lists/oss-security/2008/11/11/6 - http://www.vupen.com/english/advisories/2008/3132 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:233 - http://www.securityfocus.com/bid/32122 - http://security.gentoo.org/glsa/glsa-200903-31.xml - http://www.openwall.com/lists/oss-security/2008/11/07/1 - http://www.openwall.com/lists/oss-security/2008/11/11/4 - http://www.openwall.com/lists/oss-security/2008/11/05/1 - http://secunia.com/advisories/34353 - http://www.debian.org/security/2008/dsa-1665
CVE ID: CVE-2008-5031 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315. Additional Analyst Notes: - CVE Program Container: References: - http://svn.python.org/view
plete fix for CVE-2008-2315. Additional Analyst Notes: - CVE Program Container: References: - http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/unicodeobject.c&p2=/python/trunk/Objects/unicodeobject.c - http://security.gentoo.org/glsa/glsa-200907-16.xml - http://secunia.com/advisories/33937 - http://scary.beasts.org/security/CESA-2008-008.html - http://secunia.com/advisories/37471 - http://www.openwall.com/lists/oss-security/2008/11/05/3 - http://www.openwall.com/lists/oss-security/2008/11/05/2 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://support.apple.com/kb/HT3438 - http://svn.python.org