Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ntu.com/169-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://securitytracker.com/id?1014644 - http://secunia.com/advisories/17073 - http://www.redhat.com/support/errata/RHSA-2005-514.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9079 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://secunia.com/advisories/16355/ - http://www.securityfocus.com/bid/14517
CVE ID: CVE-2005-2100 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:15:37.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17073 - http://www.redhat.com/support/errata/RHSA-2005-514.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11556 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165547
CVE ID: CVE-2005-2101 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:15:37.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14561 - http://www.kde.org/info/security/advisory-20050815-1.txt - http://www.debian.org/security/2005/dsa-818 - http://secunia.com/advisories/16428 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:159 - http://securitytracker.com/id?1014675
CVE ID: CVE-2005-2102 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-07T22:15:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://gaim.sourceforge.net/security/?id=21 - http://www.securityfocus.com/bid/14531 - https://usn.ubuntu.com/168-1/ - https://oval.cisecurity.org/repository/search/defin
://www.securityfocus.com/bid/14531 - https://usn.ubuntu.com/168-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9283 - http://www.redhat.com/support/errata/RHSA-2005-627.html
CVE ID: CVE-2005-2103 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2025-01-16T19:43:45.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://gaim.sourceforge.net/security/?id=22 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.novell.com/linux/security/advisories/2005_19_sr.html - https://
tyfocus.com/archive/1/426078/100/0/threaded - http://www.novell.com/linux/security/advisories/2005_19_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477 - http://www.securityfocus.com/bid/14531 - https://usn.ubuntu.com/168-1/ - http://www.redhat.com/support/errata/RHSA-2005-627.html - http://www.redhat.com/support/errata/RHSA-2005-589.html
CVE ID: CVE-2005-2104 State: PUBLISHED Published: 2005-10-07T04:00:00 Last Updated: 2024-08-07T22:15:37.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16381 - http://www.osvdb.org/18682 - http://secunia.com/advisories/17539 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411 - http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21770 - http
ves/fedora-announce-list/2005-November/msg00034.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21770 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978 - http://securitytracker.com/id?1014653 - http://www.securityfocus.com/bid/15379 - http://www.redhat.com/support/errata/RHSA-2005-598.html - http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html
CVE ID: CVE-2005-2105 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050629-aaa.shtml - http://www.securitytracker.com/alerts/2005/Jun/1014330.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756 - https://exchange.xforce.ibmcloud.com/vulnerabi
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21190
CVE ID: CVE-2005-2106 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15872 - http://marc.info/?l=bugtraq&m=112015287827452&w=2 - http://www.drupal.org/security/drupal-sa-2005-002/advisory.txt - http://www.debian.org/security/2005/dsa-745 - http://www.securityfocus.com/bid/14110
CVE ID: CVE-2005-2107 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15831 - http://www.gulftech.org/?node=research&article_id=00085-06282005 - http://marc.info/?l=bugtraq&m=112006967221438&w=2
CVE ID: CVE-2005-2108 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15831 - http://www.gulftech.org/?node=research&article_id=00085-06282005 - http://marc.info/?l=bugtraq&m=112006967221438&w=2
CVE ID: CVE-2005-2109 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15831 - http://www.gulftech.org/?node=research&article_id=00085-06282005 - http://marc.info/?l=bugtraq&m=112006967221438&w=2
CVE ID: CVE-2005-2110 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an error message. NOTE: vector [1] was later reported to also affect WordPress 2.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://NeoSecurityTeam.net/advisories/Advisory-17.txt - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://secunia
urityTeam.net/advisories/Advisory-17.txt - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://secunia.com/advisories/15831 - http://www.gulftech.org/?node=research&article_id=00085-06282005 - http://marc.info/?l=bugtraq&m=112006967221438&w=2
CVE ID: CVE-2005-2111 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014345 - http://www.badroot.org/advisories/SA0x05 - http://secunia.com/advisories/15880 - http://marc.info/?l=bugtraq&m=112006558125309&w=2
CVE ID: CVE-2005-2112 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112006318512991&w=2 - http://www.gulftech.org/?node=research&article_id=00086-06292005 - http://secunia.com/advisories/15843 - http://www.xoops.org/modules/news/article.php?storyid=2383
CVE ID: CVE-2005-2113 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112006318512991&w=2 - http://www.gulftech.org/?node=research&article_id=00086-06292005 - http://secunia.com/advisories/15843 - http://www.xoops.org/modules/news/arti
/?node=research&article_id=00086-06292005 - http://secunia.com/advisories/15843 - http://www.xoops.org/modules/news/article.php?storyid=2383
CVE ID: CVE-2005-2114 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014292 - http://www.securiteam.com/securitynews/5OP0U00G1G.html - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://securitytracker.com/id?1014293 - http://secu
G1G.html - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://securitytracker.com/id?1014293 - http://securitytracker.com/id?1014294 - http://securitytracker.com/id?1014372 - http://www.kurczaba.com/html/security/0506241.htm - http://marc.info/?l=bugtraq&m=112008299210033&w=2 - http://securitytracker.com/id?1014349 - http://www.redhat.com/support/errata/RHSA-2005-586.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9628
CVE ID: CVE-2005-2115 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:15:37.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15868 - http://marc.info/?l=bugtraq&m=112008428126593&w=2 - http://aluigi.altervista.org/adv/sof2ignore-adv.txt - http://www.osvdb.org/17649
CVE ID: CVE-2005-2116 State: REJECTED Published: 2005-07-01T04:00:00 Last Updated: 2005-07-12T09:00:00 Description: No description available.
CVE ID: CVE-2005-2117 State: PUBLISHED Published: 2005-10-21T04:00:00 Last Updated: 2024-08-07T22:15:37.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://secunia.com/advisories/17223 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 - http://secunia.com/advisories/17168 - http://secuni
crosoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 - http://secunia.com/advisories/17168 - http://secunia.com/advisories/17172 - http://www.securityfocus.com/bid/15064 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html
CVE ID: CVE-2005-2118 State: PUBLISHED Published: 2005-10-21T04:00:00 Last Updated: 2024-08-07T22:15:37.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192 - http://securitytracker.
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192 - http://securitytracker.com/id?1015040 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://www.securityfocus.com/bid/15070 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 - http://secunia.com/advisories/17168 - http://secunia.com/advisories/17172 - http://www.argeniss.com/research/MSBugPaper.pdf - http://www.us-cert.gov/cas/techalerts/TA05-284A.html
CVE ID: CVE-2005-2119 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:15:37.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17161 - https://docs.microsoft.com/en-us/security
: - CVE Program Container: References: - http://secunia.com/advisories/17161 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051 - http://securitytracker.com/id?1015037 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452 - http://www.kb.cert.org/vuls/id/180868 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551 - http://securityreason.com/securityalert/73 - http://www.osvdb.org/18828 - h
finition/oval%3Aorg.mitre.oval%3Adef%3A551 - http://securityreason.com/securityalert/73 - http://www.osvdb.org/18828 - http://secunia.com/advisories/17172 - http://www.securityfocus.com/bid/15056 - http://secunia.com/advisories/17509 - http://www.eeye.com/html/research/advisories/AD20051011b.html - http://www.us-cert.gov/cas/techalerts/TA05-284A.html
CVE ID: CVE-2005-2120 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:15:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15065 - http://secunia.com/advisories/17166 - https://docs.microsoft.com/en-us/security-updates/secur
urityfocus.com/bid/15065 - http://secunia.com/advisories/17166 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244 - http://securitytracker.com/id?1015042 - http://www.eeye.com/html/research/advisories/AD20051011c.html - http://securityreason.com/securityalert/71 - http://www.osvdb.org/18830 - http://secunia.com/advisories/17172 - http://www.kb.cert.org/vuls/id/214572 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328 - https:
rg/vuls/id/214572 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html
CVE ID: CVE-2005-2122 State: PUBLISHED Published: 2005-10-21T04:00:00 Last Updated: 2024-08-07T22:15:37.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015040 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - https://oval.cisecurity.org/repository/search/d
1015040 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1329 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1488 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A708 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1537 - http://secunia.com/advisories/17168 - http://secunia.com/advisories/17172 - http://www.kb.cert.org/vuls/id/922708 - http://www.sec
unia.com/advisories/17168 - http://secunia.com/advisories/17172 - http://www.kb.cert.org/vuls/id/922708 - http://www.securityfocus.com/bid/15069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1517 - http://www.argeniss.com/research/MSBugPaper.pdf - http://www.us-cert.gov/cas/techalerts/TA05-284A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1551
CVE ID: CVE-2005-2123 State: PUBLISHED Published: 2005-11-29T21:00:00 Last Updated: 2024-08-07T22:15:37.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3
/support.avaya.com/elmodocs2/security/ASA-2005-228.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1175 - http://secunia.com/advisories/17461 - http://www.vupen.com/english/advisories/2005/2348 - http://securitytracker.com/id?1015168 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1263 - http://www.us-cert.gov/cas/techalerts/TA05-312A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A701 - http://secunia.com/advisories/17223 - http://secunia.com/advisories/17498 - http://www.kb.cert.org/vuls/id/300549 - https://oval.cisecurity.org/repository/search/definition/oval
advisories/17498 - http://www.kb.cert.org/vuls/id/300549 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1063 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 - http://www.eeye.com/html/research/advisories/AD20051108b.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1546 - http://www.securityfocus.com/bid/15352
CVE ID: CVE-2005-2124 State: PUBLISHED Published: 2005-11-29T21:00:00 Last Updated: 2024-08-07T22:15:37.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf - http://secunia.com/advisories/17461 - http://www.eeye.com/html/research/
avaya.com/elmodocs2/security/ASA-2005-228.pdf - http://secunia.com/advisories/17461 - http://www.eeye.com/html/research/advisories/AD20051108a.html - http://securityreason.com/securityalert/161 - http://www.vupen.com/english/advisories/2005/2348 - http://securitytracker.com/id?1015168 - http://www.us-cert.gov/cas/techalerts/TA05-312A.html - http://secunia.com/advisories/17223 - http://secunia.com/advisories/17498 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 - http://www.securityfocus.com/bid/15356 - http://www.eeye.com/html/research/advisories/AD20051108b.html - http://www.kb.cert.org/vuls/id/433341