Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0057 State: PUBLISHED Published: 2006-01-27T22:00:00 Last Updated: 2024-08-07T16:18:20.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23657 - http://www.kb.cert.org/vuls/id/998297 - http://www.microsoft.com/technet/
er: References: - http://www.osvdb.org/23657 - http://www.kb.cert.org/vuls/id/998297 - http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx - http://www.securityfocus.com/bid/16409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24379
CVE ID: CVE-2006-0058 State: PUBLISHED Published: 2006-03-22T20:00:00 Last Updated: 2024-08-07T16:18:20.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1529 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 - http://secunia.com/advisories/19450 - http://www.debian.org/security/2006/dsa-1015 - http://www.man
do?docId=c00692635 - http://secunia.com/advisories/19450 - http://www.debian.org/security/2006/dsa-1015 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:058 - http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688 - http://www.openbsd.org/errata38.html#sendmail - http://www.kb.cert.org/vuls/id/834865 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt - http://secunia.com/advisories/19342 - http://www.vupen.com/english/advisories/2006/1049 - http://secunia.com/advisories/19774 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc - https://oval.cisecurity.org/repository/search/definition/oval%3A
FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074 - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1 - http://secunia.com/advisories/19404 - http://secunia.com/advisories/19367 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html - http://www.vupen.com/english/advisories/2006/1051 - http://www.securityfocus.com/archive/1/428536/100/0/threaded - http://www.f-secure.com/security/fsc-2006-2.shtml - http://securityreason.com/securityalert/743 - http://securitytracker.com/id?1015801 - ht
com/security/fsc-2006-2.shtml - http://securityreason.com/securityalert/743 - http://securitytracker.com/id?1015801 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555 - http://secunia.com/advisories/19363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24584 - http://www.us-cert.gov/cas/techalerts/TA06-081A.html - http://secunia.com/advisories/20723 - http://secunia.com/advisories/20243 - http://secunia.com/advisories/19407 - http://www.vupen.com/english/advisories/2006/2189 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html - ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P - http://www.iss.
e-list/2006-April/msg00017.html - ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P - http://www.iss.net/threats/216.html - http://secunia.com/advisories/19466 - http://secunia.com/advisories/19368 - http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm - http://www.ciac.org/ciac/bulletins/q-151.shtml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555 - http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm - http://secunia.com/advisories/19345 - http://securityreason.com/securityalert/612 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html - http://secunia.com/advisories/19346 - http://s
//www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html - http://secunia.com/advisories/19346 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751 - http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml - http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only - http://www.vupen.com/english/advisories/2006/1068 - http://www.redhat.com/support/errata/RHSA-2006-0265.html - http://www.vupen.com/english/adviso
sh/advisories/2006/1068 - http://www.redhat.com/support/errata/RHSA-2006-0265.html - http://www.vupen.com/english/advisories/2006/2490 - http://www.vupen.com/english/advisories/2006/1072 - http://www.securityfocus.com/archive/1/428656/100/0/threaded - http://secunia.com/advisories/19360 - http://secunia.com/advisories/19532 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1 - http://secunia.com/advisories/19361 - http://secunia.com/advisories/19676 - http://secunia.com/advisories/19356 - http://www.novell.com/linux/security/advisories/2006_17_sendmail.html - http://www.osvdb.org/24037 - http://secunia.com/advisories/19349 - http://sunsolve.sun.com/search/document.do?assetkey
- http://www.osvdb.org/24037 - http://secunia.com/advisories/19349 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1 - http://secunia.com/advisories/19394 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 - http://www.vupen.com/english/advisories/2006/1139 - http://www.vupen.com/english/advisories/2006/1157 - http://secunia.com/advisories/19533 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc - http://www.securityfocus.com/bid/17192 - http://www.redhat.com/support/errata/RHSA-2006-0264.html - http://www.sendmail.com/company/advisory/index
om/bid/17192 - http://www.redhat.com/support/errata/RHSA-2006-0264.html - http://www.sendmail.com/company/advisory/index.shtml
CVE ID: CVE-2006-0059 State: PUBLISHED Published: 2006-05-19T19:00:00 Last Updated: 2024-08-07T16:18:20.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035 allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016113 - http://www.digitalbond.com/SCADA_Blog/2006/05/us-cert-livedata-iccp-vulnerability.html - http://www.vupen.com/english/advisories/2006/1830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ability.html - http://www.vupen.com/english/advisories/2006/1830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26490 - http://secunia.com/advisories/20146 - http://www.kb.cert.org/vuls/id/190617 - http://www.kb.cert.org/vuls/id/JGEI-6MMS9T - http://www.securityfocus.com/bid/18010
CVE ID: CVE-2006-0061 State: PUBLISHED Published: 2019-11-06T01:57:34 Last Updated: 2024-08-07T16:18:20.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2006-0061 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318123 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=399003
CVE ID: CVE-2006-0062 State: PUBLISHED Published: 2019-11-06T02:13:02 Last Updated: 2024-08-07T16:18:20.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2006-0062 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309760
CVE ID: CVE-2006-0063 State: PUBLISHED Published: 2006-01-05T19:00:00 Last Updated: 2024-08-07T16:18:20.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover, a variant of CVE-2005-4357. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0051 - http://www.osvdb.org/22672 - http://securityreason.com/securityalert/313 - http://securityreason.com/achievement_securityalert/3
ww.osvdb.org/22672 - http://securityreason.com/securityalert/313 - http://securityreason.com/achievement_securityalert/30
CVE ID: CVE-2006-0064 State: PUBLISHED Published: 2006-01-03T22:00:00 Last Updated: 2024-08-07T16:18:20.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the glob[rootDir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0016 - https://www.exploit-db.com/exploits/1398
CVE ID: CVE-2006-0065 State: PUBLISHED Published: 2006-01-03T22:00:00 Last Updated: 2024-08-07T16:18:20.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22140 - http://www.securityfocus.com/archive/1/420661/100/0/threaded - http://www.vupen.com/english/advisories/2006/0003 - http://securityreason.com/securityalert/315 - http://secunia.com/advisories/18273 -
n.com/english/advisories/2006/0003 - http://securityreason.com/securityalert/315 - http://secunia.com/advisories/18273 - http://www.securityfocus.com/bid/16107 - http://evuln.com/vulns/1/summary.html
CVE ID: CVE-2006-0066 State: PUBLISHED Published: 2006-01-03T22:00:00 Last Updated: 2024-08-07T16:18:20.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16111 - http://www.vupen.com/english/advisories/2006/0006 - http://www.securityfocus.com/archive/1/420666/100/0/threaded - http://www.osvdb.org/22149 - http://secunia.com/advisories/18265 - http://evuln.com/vulns/9/summary.html
CVE ID: CVE-2006-0067 State: PUBLISHED Published: 2006-01-03T22:00:00 Last Updated: 2024-08-07T16:18:20.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/2/summary.html - http://www.vupen.com/english/advisories/2006/0004 - http://www.securityfocus.com/bid/16108 - http://www.osvdb.org/22139 - http://secunia.com/advisories/18272
CVE ID: CVE-2006-0068 State: PUBLISHED Published: 2006-01-03T23:00:00 Last Updated: 2024-08-07T16:18:20.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) q parameter to search.php and (2) email parameter to user.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0008 - http://www.osvdb.org/22146 - http://secunia.com/advisories/18264 - http://www.securityfocus.com/bid/16125 - http://www.osvdb.org/22147 - http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html
CVE ID: CVE-2006-0069 State: PUBLISHED Published: 2006-01-03T23:00:00 Last Updated: 2024-08-07T16:18:20.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420667/100/0/threaded - http://www.securityfocus.com/bid/16112 - http://secunia.com/advisories/18270 - http://www.securityfocus.com/bid/19087 - http://evuln.com/vulns/4/summary.html
CVE ID: CVE-2006-0070 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T16:18:20.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert() function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtered HTML" is enabled, and since "Full HTML" would not filter HTML by design, perhaps this should not be included in CVE Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420683/10
in CVE Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420683/100/0/threaded - http://www.securityfocus.com/archive/1/420671/100/0/threaded
CVE ID: CVE-2006-0071 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T16:18:20.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22211 - http://www.securityfocus.com/bid/16120 - http://secunia.com/advisories/18284 - http://www.gentoo.org/security/en/glsa/glsa-200601-01.xml
CVE ID: CVE-2006-0072 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T16:18:20.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c - http://www.securityfocus.com/bid/16122 - http://www.securityfocus.com/archive/1/420677
CVE ID: CVE-2006-0073 State: PUBLISHED Published: 2006-01-04T00:00:00Z Last Updated: 2024-09-16T18:23:31.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22153 - http://www.securityfocus.com/bid/16119 - http://secunia.c
Program Container: References: - http://www.osvdb.org/22153 - http://www.securityfocus.com/bid/16119 - http://secunia.com/advisories/18283
CVE ID: CVE-2006-0074 State: PUBLISHED Published: 2006-01-04T01:00:00 Last Updated: 2024-08-07T16:18:20.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID parameter. NOTE: it was later reported that 1.1 and earlier are affected. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/5/summary.html - http://www.securityfocus.com/archive/1/420690/100/0/threaded - http://www.osvdb.org/22150 - https://www.exploit-db.com/exploits/8706 - http://secunia.com/advisories/18269 - http://www.securityfocus.com/bid/16109 - http:/
www.exploit-db.com/exploits/8706 - http://secunia.com/advisories/18269 - http://www.securityfocus.com/bid/16109 - http://www.vupen.com/english/advisories/2006/0005
CVE ID: CVE-2006-0075 State: PUBLISHED Published: 2006-01-04T01:00:00 Last Updated: 2024-08-07T16:18:20.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420698/100/0/threaded - http://evuln.com/vulns/6/summary.html - http://secunia.com/advisories/18268 - http://www.securityfocus.com/bid/16106 - http://www.vupen.com/english/advisories/2006/0002
CVE ID: CVE-2006-0076 State: PUBLISHED Published: 2006-01-04T01:00:00 Last Updated: 2024-08-07T16:18:20.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435859/100/0/threaded - http://evuln.com/vulns/3/summary.html - http://www.securityfocus.com/archive/1/420676/100/0/threaded - http://www.securityfocus.com/bid/16105 - http://www.securityfocus.com/archive/1/435371/100/0/threaded - http://securitytracker.com/id?1016211
CVE ID: CVE-2006-0077 State: PUBLISHED Published: 2006-01-04T01:00:00 Last Updated: 2024-08-07T16:18:20.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18253 - http://www.securityfocus.com/bid/16118 - http://sourceforge.net/project/shownotes.php?release_id=382199&group_id=153116 - http://www.vupen.com/english/advisories/2006/0013 - http://www.osvdb.org/22160
CVE ID: CVE-2006-0078 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php, or the (3) title and (4) message variables to (b) guestbook.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420673/100/0/threaded - http://www.vupen.com/english/advisories/2006/0018 - http://evuln.com/vulns/10/summary.html - http://secunia.com/advisories/18271 - http://www.se
lish/advisories/2006/0018 - http://evuln.com/vulns/10/summary.html - http://secunia.com/advisories/18271 - http://www.securityfocus.com/archive/1/444320/100/0/threaded - http://www.securityfocus.com/bid/16114 - http://securityreason.com/securityalert/316 - http://www.osvdb.org/22191 - http://www.osvdb.org/22190 - http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067
CVE ID: CVE-2006-0079 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL commands via the username field (adminname variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22221 - http://secunia.com/advisories/8476 - http://www.securityfocus.com/bid/16115 - http://www.vupen.com/english/advisories/2006/0027 - http://evuln.com/vulns/11/summary.html - http://www.securityfocus.com/archive/1/420675/100/0/threaded - http://securityreason.com/securi
/vulns/11/summary.html - http://www.securityfocus.com/archive/1/420675/100/0/threaded - http://securityreason.com/securityalert/318
CVE ID: CVE-2006-0080 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22220 - http://www.securityfocus.com/archive/1/421310/100/0/threaded - http://www.osvdb.org/22210 - http://www.vupen.com/english/advisories/2006/0033 - http://www.securityfocus.com/archive/1/
http://www.osvdb.org/22210 - http://www.vupen.com/english/advisories/2006/0033 - http://www.securityfocus.com/archive/1/420663/100/0/threaded - http://kapda.ir/advisory-177.html - http://secunia.com/advisories/18299 - http://www.securityfocus.com/bid/16116
CVE ID: CVE-2006-0081 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service (crash or screen resolution change) via a long text field, as demonstrated using a long window title. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2006/Jan/32 - http://www.osvdb.org/22196 - http://www.vupen.com/english/advisories/2006/0017 - http://secunia.com/advisories/18286 - http://seclists.org/fulldisclosure/2006/Jan/8 - http://www
/advisories/2006/0017 - http://secunia.com/advisories/18286 - http://seclists.org/fulldisclosure/2006/Jan/8 - http://www.securityfocus.com/bid/16127
CVE ID: CVE-2006-0082 State: PUBLISHED Published: 2006-01-04T23:00:00 Last Updated: 2024-08-07T16:18:20.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071
ram Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10717 - http://secunia.com/advisories/19408 - http://www.securityfocus.com/archive/1/452718/100/100/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876 - http://www.novell.com/linux/security/advisories/2006_06_sr.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682 - http://secunia.com/advisories/18851 - http://www.vupen.com/english/advisories/2008/0412 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:024 - http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml - http://secunia.com/advisories/2309