Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4108 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:46.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21435 - http://www.vupen.com/english/advisories/2006/3227 - http://drupal.org/node/77756 - http://www.securityfocus.com/bid/19441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28296
CVE ID: CVE-2006-4109 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:45.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21435 - http://www.vupen.com/english/advisories/2006/3227 - http://drupal.org/node/77756 - http://www.securityfocus.com/bid/19441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28295
CVE ID: CVE-2006-4110 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:45.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27913 - http://www.securityfocus.com/archive/1/442882/100/0/threaded - http://secunia.com/advisories/21490 - http://www.securityfocus.com/archive/1/443487/100/20
ive/1/442882/100/0/threaded - http://secunia.com/advisories/21490 - http://www.securityfocus.com/archive/1/443487/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28357 - http://www.vupen.com/english/advisories/2006/3265 - http://securityreason.com/securityalert/1370 - http://www.securityfocus.com/bid/19447
CVE ID: CVE-2006-4111 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:45.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21466 - http://secunia.com/advisories/21749 - http://www.securityfocus.com/bid/19454 - http://www.vupen.com/english/advisories/2006/3237 - http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory
454 - http://www.vupen.com/english/advisories/2006/3237 - http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory-Mystery-Patch.html - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits - http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml - http://securitytracker.com/id?1016673
CVE ID: CVE-2006-4112 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:45.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21466 - http://secunia.com/advisories/21749 - http://www.securityfocus.com/bid/19454 - http://weblog.r
ia.com/advisories/21466 - http://secunia.com/advisories/21749 - http://www.securityfocus.com/bid/19454 - http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure - https://exchange.xforce.ibmcloud.com/vulnerabilities/28364 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://www.securityfocus.com/archive/1/442934/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml - http://www.kb.cert.org/vuls/id/699540 - http://secunia.com/advisories/21424 - http://securitytracker.com/id?1016673
CVE ID: CVE-2006-4113 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:46.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REP_INC parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28320 - http://www.vupen.com/english/advisories/2006/3232 - http://secunia.com/advisories/21430 - http://www.osvdb.org/27880 - https://www.exploit-db.com/exploits/2149
CVE ID: CVE-2006-4114 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:45.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idsite parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442808/100/100/threaded - http://secunia.com/advisories/21451 - https://www.exploit-db.com/exploits/2159 - http://archives.neohapsis.com/archives/bugtraq/2006-08/0184.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28318 - http://securityt
s.com/archives/bugtraq/2006-08/0184.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28318 - http://securitytracker.com/id?1016686 - http://www.securityfocus.com/bid/19456 - http://www.morx.org/ring.txt - http://www.osvdb.org/27881 - http://www.vupen.com/english/advisories/2006/3238
CVE ID: CVE-2006-4115 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:46.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19439 - http://securityreason.com/securityalert/1375 - http://www.securityfocus.com/archive/1/442684/100/0/threaded - http://www.vupen.com/english/advisories/2006/3240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28290
CVE ID: CVE-2006-4116 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:46.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28283 - http://vuln.sg/lhaz131-en.html - http://www.securityfocus.com/archive/1/442445/100/0/threaded - http://www.chitora.j
3 - http://vuln.sg/lhaz131-en.html - http://www.securityfocus.com/archive/1/442445/100/0/threaded - http://www.chitora.jp/lhaz.html - http://www.securityfocus.com/bid/19377 - http://www.vupen.com/english/advisories/2006/3173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28282 - http://securityreason.com/securityalert/1378 - http://secunia.com/advisories/21348
CVE ID: CVE-2006-4117 State: PUBLISHED Published: 2006-08-14T21:00:00 Last Updated: 2024-08-07T18:57:46.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad trap" and system panic) by opening and closing a large number of TCP connections ("heavy TCP/IP loads"). NOTE: the original report specifies the function name as "drain_squeue," but this is likely incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28321 - http://securit
ces: - http://secunia.com/advisories/21453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28321 - http://securitytracker.com/id?1016674 - http://www.vupen.com/english/advisories/2006/3239 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1
CVE ID: CVE-2006-4118 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $fo
homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, and (21) $Temp_form_pass variables. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21355 - http://www.securityfocus.com/bid/19342 - http://www.securityfocus.com/archive/1/442209/100/100/threaded - http://securityreason.com/securityalert/1376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28221 - http://www.vupen.com/english/advisories/2006/3154 - http://marc.info/?l=full-disclosure&m=115464299914573&w=2
CVE ID: CVE-2006-4119 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Temp_entered_password parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28221
CVE ID: CVE-2006-4120 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/77753 - http://www.vupen.com/english/advisories/2006/3202 - http://secunia.com/advisories/21381 - http://drupal.org/node/77538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28490 - http://www.securityfocus.com/bid/19422
CVE ID: CVE-2006-4121 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3233 - http://secunia.com/advisories/21460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28302 - https://www.exploit-db.com/exploits/2155 - http://www.securityfocus.com/bid/19443
CVE ID: CVE-2006-4122 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442884/100/0/threaded - http://www.vupen.com/english/advisories/2006/3229 - http://www.securityfocus.com/bid/19437 - http://it.security.netsons.org/exploit/simplegb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28289 - http://secunia.com/advisories/
s.org/exploit/simplegb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28289 - http://secunia.com/advisories/21429
CVE ID: CVE-2006-4123 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2153 - http://www.securityfocus.com/bid/19440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28297
CVE ID: CVE-2006-4124 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2144 - http://www.securityfocus.com/bid/19430 - http://karol.wiesek.pl/files/lesstif-advisory.pdf - http://www.vupen.com/english/advisories/2006/3230 - http://secunia.com/advisories/21428 - https://exchange.xforce.ibmc
- http://www.vupen.com/english/advisories/2006/3230 - http://secunia.com/advisories/21428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28298
CVE ID: CVE-2006-4125 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary code via a large nickname, which is not properly handled by the listen_thread_udp function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442440/100/0/threaded - http://www.vupen.com/english/advisories/2006/3181 - http://secunia.com/advisories/21384 - http://securityreason.com/securityalert/1377 - http://www.dc.ds.pg.gda.pl/ - http://www.securityfocus.
dvisories/21384 - http://securityreason.com/securityalert/1377 - http://www.dc.ds.pg.gda.pl/ - http://www.securityfocus.com/bid/19369 - http://securitytracker.com/id?1016641 - http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/28276
CVE ID: CVE-2006-4126 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442440/100/0/threaded - http://www.vupen.com/english/advisories/2006/3181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28279 - http://secunia.com/advisories/21384 - http://w
/2006/3181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28279 - http://secunia.com/advisories/21384 - http://www.securityfocus.com/bid/19370 - http://securityreason.com/securityalert/1377 - http://www.dc.ds.pg.gda.pl/ - http://securitytracker.com/id?1016641 - http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog
CVE ID: CVE-2006-4127 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442440/100/0/threaded - http://www.vupen.com/english/advisories/2006/3181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
0/0/threaded - http://www.vupen.com/english/advisories/2006/3181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28280 - http://secunia.com/advisories/21384 - http://securityreason.com/securityalert/1377 - http://www.dc.ds.pg.gda.pl/ - http://securitytracker.com/id?1016641 - http://www.securityfocus.com/bid/19371 - http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog
CVE ID: CVE-2006-4128 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possi
10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016683 - http://seer.entsupport.symantec.com/docs/284623.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28336 - http://www.securityfocus.com/archive/1/443037/100/0/threaded - http://www.kb.cert.org/vuls/id/647796 - http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html - http://securityreason.com/securityalert/1380 - http://www.vupen.com/english/advisories/2006/3266 - http://www.securityfocu
tp://securityreason.com/securityalert/1380 - http://www.vupen.com/english/advisories/2006/3266 - http://www.securityfocus.com/bid/19479 - http://secunia.com/advisories/21472
CVE ID: CVE-2006-4129 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the component_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21495 - http://www.securityfocus.com/bid/19492 - http://www.vupen.com/english/advisories/2006/3272 - http://www.securityfocus.com/bid/19511 - http://www.securityfocus.com/archive/1/443211/100/0/threaded - htt
/2006/3272 - http://www.securityfocus.com/bid/19511 - http://www.securityfocus.com/archive/1/443211/100/0/threaded - https://www.exploit-db.com/exploits/2177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28350
CVE ID: CVE-2006-4130 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19465 - http://secunia.com/advisories/21477 - http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3
m/advisories/21477 - http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3.26/ - http://www.securityfocus.com/archive/1/442869/100/0/threaded - http://securityreason.com/securityalert/1379 - http://www.vupen.com/english/advisories/2006/3270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28330 - http://www.remository.com/component/option%2Ccom_mamboboard/func%2Cview/catid%2C6/id%2C3666/#3666
CVE ID: CVE-2006-4131 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19451 - http://securityreason.com/securityalert/1387 - ht
gram Container: References: - http://www.securityfocus.com/bid/19451 - http://securityreason.com/securityalert/1387 - https://www.exploit-db.com/exploits/2156 - http://www.securityfocus.com/archive/1/442841/100/0/threaded - http://www.arcsoft.com/support/downloads/download_patches/mms.asp - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28342 - http://www.vupen.com/english/advisories/2006/3261 - http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf - http://secunia.com/advisories/21426
CVE ID: CVE-2006-4132 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28344 - http://securityreason.com/securityalert/1387 - https://www.exploit-db.com/exploits/2156 - http://www.securityfocus.com/archive/1/442841/100/
n.com/securityalert/1387 - https://www.exploit-db.com/exploits/2156 - http://www.securityfocus.com/archive/1/442841/100/0/threaded - http://www.arcsoft.com/support/downloads/download_patches/mms.asp - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html - http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf - http://secunia.com/advisories/21426