Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/23578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33785 - http://www.securityfocus.com/archive/1/466404/100/0/threaded - http://secunia.com/advisories/25003
CVE ID: CVE-2007-2198 State: PUBLISHED Published: 2007-04-24T18:00:00 Last Updated: 2024-08-07T13:23:51.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularz_przelewu_wplaty/druk.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.lms.org.pl/ - http://www.lms.org.pl/download/1.6/lms-1.6.9.tar.gz - http://www.securityfocus.com/bid/23715 - http://www.vupen.com/english/advisories/2007/1580 - http://osvdb.org/35479 - http://secunia
ecurityfocus.com/bid/23715 - http://www.vupen.com/english/advisories/2007/1580 - http://osvdb.org/35479 - http://secunia.com/advisories/25067
CVE ID: CVE-2007-2199 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25230 - http://www.
eter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25230 - http://www.securityfocus.com/bid/23613 - http://www.securityfocus.com/bid/23708 - http://www.hackers.ir/advisories/joomla.html - https://www.exploit-db.com/exploits/3781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35092 - https://www.exploit-db.com/exploits/4111 - http://www.attrition.org/pipermail/vim/2007-May/001618.html - http://www.vupen.com/english/advisories/2007/1511 - http://www.securityfocus.com/bid/25528 - http://www.securityfocus.com/archive/1/478503/100/0/threaded - http://osvdb.org/36009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34273 - https://www
78503/100/0/threaded - http://osvdb.org/36009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34273 - https://www.exploit-db.com/exploits/3915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33837 - http://www.securityfocus.com/bid/24660 - http://osvdb.org/34803 - http://www.securityfocus.com/archive/1/466687/100/0/threaded
CVE ID: CVE-2007-2200 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. (dot dot) in the asolute parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35311 - http://www.securityfocus.com/bid/23617 - http://www.vupen.com/english/advisories/2007/1512 - https://www.exploit-db.com/exploits/3783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33848 - http://osvdb.org/35312 - http://secunia.com/advisori
3783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33848 - http://osvdb.org/35312 - http://secunia.com/advisories/24992
CVE ID: CVE-2007-2201 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) common.php or (2) themes/default/preview_post_completo.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2653 - http://www.securityfocus.com/bid/23607 - http://secunia.com/advisories/24971 - http://osvdb.org/35318 - http://osvdb.org/35317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
isories/24971 - http://osvdb.org/35318 - http://osvdb.org/35317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33825 - http://www.vupen.com/english/advisories/2007/1513 - https://www.exploit-db.com/exploits/3785 - http://www.securityfocus.com/archive/1/466707/100/0/threaded
CVE ID: CVE-2007-2202 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services (ACVSWS) PHP5 (ACVSWS_PHP5) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CheminInclude parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23603 - http://secunia.com/advisories/24983 - http://www.vupen.com/english/advisories/2007/1509 - http://www.securityfocus.com/archive/1/466695/100/0/threaded - http://securityre
upen.com/english/advisories/2007/1509 - http://www.securityfocus.com/archive/1/466695/100/0/threaded - http://securityreason.com/securityalert/2609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33840
CVE ID: CVE-2007-2203 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466693/100/0/threaded - http://www.vupen.com/english/advisories/2007/1518 - http://www.securityfocus.com/bid/23591 - http://secunia.com/advisories/24997 - http://osvdb.org/35313
CVE ID: CVE-2007-2204 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board (GPB) unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) db.mysql.inc.php or (2) gpb.inc.php in include/, or the (3) theme parameter to themes/ubb/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3786 - http://osvdb.org/37539 - http://osvdb.org/37540 - http://www.securityfocus.com/bid/23622 - http://www.vupen.com/english/advisories
db.org/37539 - http://osvdb.org/37540 - http://www.securityfocus.com/bid/23622 - http://www.vupen.com/english/advisories/2007/1514 - http://osvdb.org/37541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33839
CVE ID: CVE-2007-2205 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-1643. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33819 - http://www.attrition.org/pipermail/vim/2007-April/001560.html - http://osvdb.org/35480 - http://securityreason.com/securityalert/2630 - http://www.sec
mail/vim/2007-April/001560.html - http://osvdb.org/35480 - http://securityreason.com/securityalert/2630 - http://www.securityfocus.com/archive/1/466664/100/0/threaded - http://www.securityfocus.com/bid/23611
CVE ID: CVE-2007-2206 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading "&lt;&quot;&lt;" in the ripeformpost parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23597 - http://archives.neohapsis.com/archives/bugtraq/2007-04/0384.html - http://john-martinelli.com/work/ripe.txt - http://www.vupen.com/english/advisories/2007/1519 - http://securityreason.com/securitya
n-martinelli.com/work/ripe.txt - http://www.vupen.com/english/advisories/2007/1519 - http://securityreason.com/securityalert/2602 - http://secunia.com/advisories/24984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33817 - http://osvdb.org/35362
CVE ID: CVE-2007-2207 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33818 - http://www.securityfocus.com/bid/23597 - http://john-martinelli.com/work/ripe.txt - http://www.securityfocus.com/archive/1/466673/100/0/threaded - http://www.vupen.com/english/advisories/2007/1519 - http://osvdb.org/35363 - h
cus.com/archive/1/466673/100/0/threaded - http://www.vupen.com/english/advisories/2007/1519 - http://osvdb.org/35363 - http://securityreason.com/securityalert/2602 - http://secunia.com/advisories/24984
CVE ID: CVE-2007-2208 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Extreme PHPBB2 3.0 Pre Final allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) functions.php or (2) functions_portal.php in includes/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35421 - http://securityreason.com/securityalert/2608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33743 - http://osvdb.org/35420 - http://www.securityfocus.com/archive/1/466180/100/0/threaded
CVE ID: CVE-2007-2209 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1506 - https://www.exploit-db.com/exploits/3779 - http://secunia.com/advisories/25050 - http://secunia.com/advisories/2501
06 - https://www.exploit-db.com/exploits/3779 - http://secunia.com/advisories/25050 - http://secunia.com/advisories/25016 - http://www.securitytracker.com/id?1017963 - http://www.securityfocus.com/bid/23604 - http://osvdb.org/35308 - http://osvdb.org/35386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
CVE ID: CVE-2007-2210 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service (Internet Explorer crash) via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2604 - http://osvdb.org/35413 - http://www.securityfocus.com/bid/23535 - http://www.securityfocus.com/archive/1/466022/100/100/threaded
CVE ID: CVE-2007-2211 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23612 - http://www.vupen.com/english/advisories/2007/1510 - http://secunia.com/advisories/24967 - https://www.exploit-db.com/exploits/3780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33814
CVE ID: CVE-2007-2212 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33814
CVE ID: CVE-2007-2213 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WS_FTP Home and Professional 2007 allows remote attackers to cause a denial of service (NULL dereference and application crash) via unspecified vectors related to "improper arguments." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466647/100/0/threaded - http://www.securityfocus.com/archive/1/466576/100/0/threaded - http://www.securityfocus.com/bid/23584 - https://exchange.xforce.ibmcloud.com/
cus.com/archive/1/466576/100/0/threaded - http://www.securityfocus.com/bid/23584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33846
CVE ID: CVE-2007-2214 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote attackers to upload arbitrary PHP scripts by placing a script's contents in both the File2 and File3 parameters, and sending a ok.php?do=act Referer. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35636 - http://www.securityfocus.com/archive/1/466704/100/0/threaded - http://www.vupen.com/english/advisories/2007/1516 - http://securityreason.com/securityalert/2605 - http://www.securityfocus.com/bid/23628
CVE ID: CVE-2007-2215 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-2216 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:23:51.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osv
ile, aka "ActiveX Object Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36396 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2109 - http://www.vupen.com/english/advisories/2007/2869 - http://secunia.com/advisories/26419 - http://www.securityfocus.com/bid/25289 - http://securitytracker.com/id?1018562 - http://www.securityfocus.com/archive/1/476742/100/0/threaded
CVE ID: CVE-2007-2217 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T13:23:51.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-055 - http://www.securityfocus.com/bid/25909 - https://www.exploit-db.com/exploits/4584 - http://www.securityfocus.com/archive/1/482
/www.securityfocus.com/bid/25909 - https://www.exploit-db.com/exploits/4584 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1481 - http://secunia.com/advisories/27092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36799 - http://securitytracker.com/id?1018784 - http://www.kb.cert.org/vuls/id/180345 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://www.vupen.com/english/advisories/2007/3435
CVE ID: CVE-2007-2218 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T13:23:51.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/810073 - http://secunia.com/advisories/25620 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - https://docs.microsoft.com/en-us/secur
advisories/25620 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-031 - http://www.securitytracker.com/id?1018226 - http://www.vupen.com/english/advisories/2007/2151 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1895 - http://www.securityfocus.com/bid/24416 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-2219 State: PUBLISHED Published: 2007-06-12T20:00:00 Last Updated: 2024-08-07T13:23:51.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35341 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-035 - http://www.kb.cert.org/vuls/id/457281 - http://www.us-cert.gov/cas/techalerts/TA07-163A.
curitybulletins/2007/ms07-035 - http://www.kb.cert.org/vuls/id/457281 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.securityfocus.com/bid/24370 - http://www.vupen.com/english/advisories/2007/2155 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643 - http://www.securitytracker.com/id?1018230 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://secunia.com/advisories/25640
CVE ID: CVE-2007-2220 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-2221 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:23:51.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote attackers to overwrite arbitrary files via unspecified vectors, aka the "Arbitrary File Rewrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www
otes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1885 - http://www.osvdb.org/34404 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.kb.cert.org/vuls/id/500753 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33355 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.fortiguardcenter.
ibmcloud.com/vulnerabilities/33355 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.fortiguardcenter.com/advisory/FGA-2007-07.html - http://www.securityfocus.com/bid/23827
CVE ID: CVE-2007-2222 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T13:23:51.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34630 - http://osvdb.org/3535
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34630 - http://osvdb.org/35353 - http://www.kb.cert.org/vuls/id/507433 - http://secunia.com/advisories/25627 - http://www.exploit-db.com/exploits/4065 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.securityfocus.com/bid/24426 - http://securitytracker.com/id?1018235 - http://retrogod.altervista.org/win_speech_2k_sp4.html - http://www.vupen.com/english/advisories/2007/2153 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2031 - http://retrogod.altervista.org/win_speech_xp_sp2.html -
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2031 - http://retrogod.altervista.org/win_speech_xp_sp2.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-2223 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:23:51.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/361968 - http://www.securitytracker.com/id?1018559 - http://www.securityfocus.com/archive/1/476747/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=576 - http://w