Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7212 - http://secunia.com/advisories/25955 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.6 - http://www.ubuntu.com/usn/usn-510-1 - http://www.debian.org/security/2007/dsa-1356 - http://www.securityfocus.com/bid/24818 - http://www.vupen.com/english/advisories/2007/2466 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25845b5155b55cd77e42655ec24161ba3feffa47 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.15 - http://osvdb.org/37117 - http://secunia.com/advisories/26450 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:195
CVE ID: CVE-2007-3643 State: PUBLISHED Published: 2007-07-10T01:00:00 Last Updated: 2024-08-07T14:21:36.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472666/100/0/threaded - http://securityreason.com/securityalert/2871 - http://osvdb.org/38952 - http://www.securityfocus.com/bid/24736/info - https://exchange.xforce.ibmcloud.com/vulnerabilities/35234
CVE ID: CVE-2007-3644 State: PUBLISHED Published: 2007-07-14T00:00:00 Last Updated: 2024-08-07T14:21:36.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc - http://www.kb.cert.org/vuls/id/970849 - http://www.vupen.com/english/advisories/2007/2521 - http://www.debian.o
ve.asc - http://www.kb.cert.org/vuls/id/970849 - http://www.vupen.com/english/advisories/2007/2521 - http://www.debian.org/security/2008/dsa-1455 - http://security.freebsd.org/patches/SA-07:05/libarchive.patch - http://secunia.com/advisories/26050 - http://www.securityfocus.com/bid/24885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35402 - http://security.gentoo.org/glsa/glsa-200708-03.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924 - http://osvdb.org/38094 - http://people.freebsd.org/~kientzle/libarchive/ - http://secunia.com/advisories/26062 - http://osvdb.org/38093 - http://secunia.com/advisories/26355 - http://www.securitytracker.com/id?1018379 - http://secunia.co
://osvdb.org/38093 - http://secunia.com/advisories/26355 - http://www.securitytracker.com/id?1018379 - http://secunia.com/advisories/28377 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-3645 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T14:21:36.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, which results in a NULL pointer dereference, a different issue than CVE-2007-3644. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35404 - http://www.vupen.com/e
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35404 - http://www.vupen.com/english/advisories/2007/2521 - http://www.debian.org/security/2008/dsa-1455 - http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc - http://security.freebsd.org/patches/SA-07:05/libarchive.patch - http://secunia.com/advisories/26050 - http://www.securityfocus.com/bid/24885 - http://security.gentoo.org/glsa/glsa-200708-03.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924 - http://osvdb.org/38094 - http://people.freebsd.org/~kientzle/libarchive/ - http://secunia.com/advisories/26062 - http://osvdb.org/38093 - http://secunia.com/advisories/26355 -
tzle/libarchive/ - http://secunia.com/advisories/26062 - http://osvdb.org/38093 - http://secunia.com/advisories/26355 - http://www.securitytracker.com/id?1018379 - http://secunia.com/advisories/28377 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-3646 State: PUBLISHED Published: 2007-07-10T17:00:00 Last Updated: 2024-08-07T14:21:36.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a member action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35293 - http://www.vupen.com/english/advisories/2007/2461 - http://flashgamescript.com/forum/viewtopic.php?t=425 - http://www.securityfocus.com/bid/24809 - https://www.exploit-db.com/exploits/4161 -
ipt.com/forum/viewtopic.php?t=425 - http://www.securityfocus.com/bid/24809 - https://www.exploit-db.com/exploits/4161 - http://osvdb.org/36297
CVE ID: CVE-2007-3647 State: PUBLISHED Published: 2007-07-10T17:00:00 Last Updated: 2024-08-07T14:21:36.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25976 - http://corryl.altervista.org/index.php?mod=read&id=1183748959 - http://www.securityfocus.com/archive/1/473041/100/0/threaded - https://exchange.xforce.ib
x.php?mod=read&id=1183748959 - http://www.securityfocus.com/archive/1/473041/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35290 - http://securityreason.com/securityalert/2870 - http://www.securityfocus.com/bid/24823 - http://osvdb.org/37477
CVE ID: CVE-2007-3648 State: PUBLISHED Published: 2007-07-10T17:00:00 Last Updated: 2024-08-07T14:21:36.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26019 - http://www.securityfocus.com/bid/24878 - http://osvdb.org/41104 - http://www.valarsoft.com/index.php?page=ho
ies/26019 - http://www.securityfocus.com/bid/24878 - http://osvdb.org/41104 - http://www.valarsoft.com/index.php?page=home&notizie=&notID=144#npos144 - http://www.vupen.com/english/advisories/2007/2465
CVE ID: CVE-2007-3649 State: PUBLISHED Published: 2007-07-10T17:00:00 Last Updated: 2024-08-07T14:21:36.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4155 - http://www.securityfocus.com/bid/24793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35288 - http://osvdb.org/45800
CVE ID: CVE-2007-3650 State: PUBLISHED Published: 2008-07-09T00:00:00.000Z Last Updated: 2025-04-03T14:47:21.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://descriptions.securescout.com/tc/17970 - http://www.netvigilance.com/advisory0039
CVE ID: CVE-2007-3651 State: PUBLISHED Published: 2008-07-09T00:00:00.000Z Last Updated: 2025-04-03T14:41:43.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.netvigilance.com/advisory0041 - http://descriptions.securescout.com/tc/17971
CVE ID: CVE-2007-3652 State: PUBLISHED Published: 2008-07-09T00:00:00.000Z Last Updated: 2025-04-03T14:38:54.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://descriptions.securescout.com/tc/17972 - http://www.netvigilance.com/advisory0042
CVE ID: CVE-2007-3653 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T14:21:36.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43502 - http://www.netvigilance.com/advisory0043 - http://descriptions.securescout.com/tc/17973
CVE ID: CVE-2007-3654 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T14:21:36.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service (panic) via a (1) negative or (2) large value in an ioctl call, as demonstrated by the vga_allocattr function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25682 - http://www.securitytracker.com/id?1018693 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-006.txt.asc - https://exchange.xforce.ibmcloud.com
3 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-006.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/36598 - http://osvdb.org/40810
CVE ID: CVE-2007-3655 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:21:36.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0818.html - http://osvdb.org/37756 - http://docs.info.apple.com/article.html?artnum=307177 - http://www.vupen.com/english/advisories/2007/2477 - http://secunia.com/advisories/26314 - http://www.se
?artnum=307177 - http://www.vupen.com/english/advisories/2007/2477 - http://secunia.com/advisories/26314 - http://www.securityfocus.com/bid/24832 - http://secunia.com/advisories/26369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35320 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://secunia.com/advisories/29858 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://secunia.com/advisories/25981 - http://securityreason.com/securityalert/2874 - http://research.eeye.com/html/advisories/published/AD20070705.html - http://www.securitytracker.com/id?1018346 - http://www.vupen.com/english/advisories/2007/4224 - http://www.securityfocus.com/archive/
curitytracker.com/id?1018346 - http://www.vupen.com/english/advisories/2007/4224 - http://www.securityfocus.com/archive/1/473356/100/0/threaded - http://secunia.com/advisories/30780 - http://www.securityfocus.com/archive/1/473224/100/0/threaded - http://secunia.com/advisories/27266 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102996-1 - http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11367 - http://secunia.com/advisories/28115 - http://www.exploit-db.com/exploits/30284 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/g
om/exploits/30284 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml - http://www.redhat.com/support/errata/RHSA-2007-0829.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064552.html
CVE ID: CVE-2007-3656 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-490-1 - http://secunia.com/advisories/26107 - http://www.mozilla.org/security/announce/2007/mfs
//www.ubuntu.com/usn/usn-490-1 - http://secunia.com/advisories/26107 - http://www.mozilla.org/security/announce/2007/mfsa2007-24.html - http://lcamtuf.coredump.cx/ffcache/ - http://osvdb.org/38028 - http://secunia.com/advisories/26179 - http://www.vupen.com/english/advisories/2007/4256 - http://secunia.com/advisories/25589 - http://securityreason.com/securityalert/2872 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml - http://www.securitytracker.com/id?1018411 - http://www.debian.org/security/2007/dsa-1339 - http://secunia.com/advisor
- http://www.securitytracker.com/id?1018411 - http://www.debian.org/security/2007/dsa-1339 - http://secunia.com/advisories/25990 - http://secunia.com/advisories/26151 - http://secunia.com/advisories/28135 - http://secunia.com/advisories/26216 - http://secunia.com/advisories/26103 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9105 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.debian.org/security/2007/dsa-1337 - http://secunia.com/advisories/26211 - http://secunia.com/advisories/26159 - http://www.novell.com/linux/security/advisories/2007_49
nia.com/advisories/26211 - http://secunia.com/advisories/26159 - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://www.securityfocus.com/archive/1/473191/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=387333 - http://www.securityfocus.com/archive/1/474542/100/0/threaded - http://secunia.com/advisories/26258 - http://secunia.com/advisories/26460 - ftp://patches.sgi.com/suppo
100/0/threaded - http://secunia.com/advisories/26258 - http://secunia.com/advisories/26460 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/100/0/threaded - http://www.securityfocus.com/bid/24831 - http://secunia.com/advisories/26271 - http://www.redhat.com/support/errata/RHSA-2007-0722.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35298 - http://secunia.com/advisories/26204 - http://secunia.com/advisories/26205
CVE ID: CVE-2007-3657 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. NOTE: this issue has been disputed by third party researchers, stating that "this does not crash on me, and I can't see a likely mechanism of action that would lead to a DoS condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - http://osvdb.org/45812 - http://www.securityfocus.com/bid/24820 - http://www.securityfocus.com/archive/1/473212
CVE ID: CVE-2007-3658 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Register Server (REGSVR) allows attackers to cause a denial of service via a crafted DLL library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - http://osvdb.org/45806 - http://www.securityfocus.com/archive/1/473212 - http://www.eleytt.com/advisories/eleytt_REGSVR.pdf
CVE ID: CVE-2007-3659 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environment variable. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.eleytt.com/advisories/eleytt_FREEWRL.pdf - http://www.securityfocus.com/archive/1/473187 - http://osvdb.org/45807
CVE ID: CVE-2007-3660 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42022 - http://www.securityfocus.com/bid/24822 - http://www.securityfocus.com/archive/1/473187 - http://www.eleytt.com/advisories/eleytt_NONNOIASPBARCODE.pdf
CVE ID: CVE-2007-3661 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eltima Software Virtual Serial Port (VSPAX) ActiveX control (VSPort.DLL) allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the (1) Attach, (2) Write, and (3) WriteStr functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - http://www.securityfocus.com/bid/24827 - http://osvdb.org/43775
CVE ID: CVE-2007-3662 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - http://osvdb.org/45808 - http://www.securityfocus.com/archive/1/473212 - http://www.securityfocus.com/bid/24830
CVE ID: CVE-2007-3663 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473212 - http://www.eleytt.com/advisories/eleytt_MPC.pdf - http://osvdb.org/37376
CVE ID: CVE-2007-3664 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attackers to cause a denial of service via certain functions when "improperly used", as demonstrated by the AcceptControls subroutine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - http://osvdb.org/43776
CVE ID: CVE-2007-3665 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45802 - http://www.securityfocus.com/archive/1/473187 - http://www.securityfocus.com/bid/24826 - http://www.eleytt.com/advisories/eleytt_GHOST1.pdf - http://www.securityfocus.com/archive/1/473212
CVE ID: CVE-2007-3666 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43961 - http://www.securityfocus.com/bid/24825 - http://www.securityfocus.com/archive/1/473187 - http://www.eleytt.com/advisories/eleytt_GHOST2.pdf - http://www.securityfocus.com/archive/1/473212
CVE ID: CVE-2007-3667 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EXCLEXPT.DLL in ActiveReportsExcelReport allows remote attackers to cause a denial of service via the DDRow Height variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35866 - http://www.securityfocus.com/bid/24815
CVE ID: CVE-2007-3668 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via "improperly initialized" (1) LoadSegmentWord, (2) PartitionType, (3) SectorCount, and (4) BootFilePath variables. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43777 - http://www.securityfocus.com/archive/1/473187 - http://www.securityfocus.com/bid/24821