Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4316 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T10:08:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation. Additional Analyst Notes: - CVE Program Container: References: - http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff - http://www.securityfocus.com/archive/1/501766/100/0/threaded - http://www.ubuntu.com/usn/usn-738-1 - http://secunia.com/advisories/34560 - http://www.openwall.com/lists/oss-security/2009/03/16/2
buntu.com/usn/usn-738-1 - http://secunia.com/advisories/34560 - http://www.openwall.com/lists/oss-security/2009/03/16/2 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:080 - http://wiki.rpath.com/Advisories:rPSA-2009-0045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html - http://openwall.com/lists/oss-security/2009/03/12/2 - http://www.securityfocus.com/bid/34100 - http://secunia.com/advisories/34854 - http://www.securityfocus.com/archive/1/501
ttp://www.securityfocus.com/bid/34100 - http://secunia.com/advisories/34854 - http://www.securityfocus.com/archive/1/501712/100/0/threaded - http://secunia.com/advisories/34267 - http://www.redhat.com/support/errata/RHSA-2009-0336.html - http://secunia.com/advisories/38833 - http://www.securitytracker.com/id?1021884 - http://www.debian.org/security/2009/dsa-1747 - http://secunia.com/advisories/34317 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html - http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html - http://secunia.com/advisories/34416 - http://svn.gnome.org/viewvc/glib?view=revision&revision=7973 - https://oval.cisecurity.org/reposit
om/advisories/34416 - http://svn.gnome.org/viewvc/glib?view=revision&revision=7973 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360 - http://secunia.com/advisories/34404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49272 - http://secunia.com/advisories/34890 - http://www.vupen.com/english/advisories/2010/0528 - http://www.ocert.org/advisories/ocert-2008-015.html
CVE ID: CVE-2008-4317 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-16T16:14:11.350Z Description: No description available.
CVE ID: CVE-2008-4318 State: PUBLISHED Published: 2008-09-29T18:00:00 Last Updated: 2024-08-07T10:08:35.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6559 - http://securityreason.com/securityalert/4322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45398
CVE ID: CVE-2008-4319 State: PUBLISHED Published: 2008-09-29T18:00:00 Last Updated: 2024-08-07T10:08:35.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6567 - http://www.securityfocus.com/bid/31415 - http://www.securityfocus.com/archive/1/496742 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ocus.com/bid/31415 - http://www.securityfocus.com/archive/1/496742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45423
CVE ID: CVE-2008-4320 State: PUBLISHED Published: 2008-09-29T18:00:00 Last Updated: 2024-08-07T10:08:35.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.opennms.org/show_bug.cgi?id=2633 - http://bugzilla.opennms.org/show_bug.cgi?id=2634 - http://www.securityfocus.com/bid/31410 - http://secunia.com/advisorie
http://bugzilla.opennms.org/show_bug.cgi?id=2634 - http://www.securityfocus.com/bid/31410 - http://secunia.com/advisories/32019 - http://bugzilla.opennms.org/show_bug.cgi?id=2631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45417 - http://www.opennms.org/documentation/ReleaseNotesUnStable.html#d788e257
CVE ID: CVE-2008-4321 State: PUBLISHED Published: 2008-09-29T19:00:00 Last Updated: 2024-08-07T10:08:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6256 - http://www.securityfocus.com/bid/30685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44443 - http://secunia.com/advisories/31481 - https://www.exploit-db.com/exploits/6240 - http://securityreason.com/securityalert/4327 - http://www.vupen.com/english/advisories/2008/238
t-db.com/exploits/6240 - http://securityreason.com/securityalert/4327 - http://www.vupen.com/english/advisories/2008/2381 - https://www.exploit-db.com/exploits/6248
CVE ID: CVE-2008-4322 State: PUBLISHED Published: 2008-09-29T19:00:00 Last Updated: 2024-08-07T10:08:35.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45465 - http://reversemode.com/index.php?option=com_content&task=view&id=55&Itemid=1 - http://www.securityfocus.com/archive/1/496759/100/0/threaded - http://secunia.com/advisories/32055 - http://www.securityfocus.com
w.securityfocus.com/archive/1/496759/100/0/threaded - http://secunia.com/advisories/32055 - http://www.securityfocus.com/bid/31418 - http://www.kb.cert.org/vuls/id/976484 - http://www.vupen.com/english/advisories/2008/2694
CVE ID: CVE-2008-4323 State: PUBLISHED Published: 2008-09-29T20:00:00 Last Updated: 2024-08-07T10:08:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted .ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6616
CVE ID: CVE-2008-4324 State: PUBLISHED Published: 2008-09-29T20:00:00 Last Updated: 2024-08-07T10:08:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it was later reported that Firefox 3.0.2 on Mac OS X 10.5 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4321 - http://secunia.com/advisories/32040 - http://www.secniche.org/moz303.
: - http://securityreason.com/securityalert/4321 - http://secunia.com/advisories/32040 - http://www.secniche.org/moz303.html - http://www.securityfocus.com/bid/31476 - http://www.secniche.org/moz303/index.html - https://www.exploit-db.com/exploits/6614 - http://www.securityfocus.com/archive/1/496807/100/0/threaded - http://www.securityfocus.com/archive/1/496846/100/0/threaded - http://evilfingers.com/advisory/Firefox_User_Interface_Null_Pointer_Dereference_Dispatcher_Crash_n_Remote_DoS.php
CVE ID: CVE-2008-4325 State: PUBLISHED Published: 2008-09-30T16:00:00Z Last Updated: 2024-09-17T01:06:23.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object. NOTE: this issue might not be a vulnerability, since it requires attacker access to the repository that is being viewed. Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/source/browse/viewvc?rev=197
. Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/source/browse/viewvc?rev=1978&view=rev - http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?rev=2011&r1=1968&r2=1978 - http://www.openwall.com/lists/oss-security/2008/09/19/4 - http://viewvc.tigris.org/issues/show_bug.cgi?id=354 - http://www.openwall.com/lists/oss-security/2008/09/20/1 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01142.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01101.html
CVE ID: CVE-2008-4326 State: PUBLISHED Published: 2008-09-30T16:00:00 Last Updated: 2024-08-07T10:08:35.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/ - http://www.debian.org/security/2008/dsa-1675 - http://www.vupen.com/english/advisories/2008/2657 - http://lists.opensu
- http://www.debian.org/security/2008/dsa-1675 - http://www.vupen.com/english/advisories/2008/2657 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1 - http://osvdb.org/48511 - http://www.openwall.com/lists/oss-security/2008/09/22/2 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8 - http://secunia.com/advisories/33822 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html - http://secunia.com/advisories/32954 - http://secunia.com/advisories/31974 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=1
myadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=11603&pathrev=11603 - http://jvn.jp/en/jp/JVN54824688/index.html - http://secunia.com/advisories/31992 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/js_escape.lib.php?view=log&pathrev=11603
CVE ID: CVE-2008-4327 State: PUBLISHED Published: 2008-09-30T16:00:00 Last Updated: 2024-08-07T10:08:35.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of service (divide-by-zero error and persistent application crash) via this crash.ico file on the desktop, a different vulnerability than CVE-2007-2237. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfo
vulnerability than CVE-2007-2237. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45464 - http://www.securityfocus.com/bid/31432 - https://www.exploit-db.com/exploits/6588
CVE ID: CVE-2008-4328 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the (1) item, (2) search_ordermethod, and (3) search_order parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ - http://www.securityfocus.com/archive/1/496744/100/0/threaded - http://securityreason.com/securityalert/4337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45418 - http://www.securityfocus
ityreason.com/securityalert/4337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45418 - http://www.securityfocus.com/bid/31401
CVE ID: CVE-2008-4329 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31413 - https://www.exploit-db.com/exploits/6571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45435
CVE ID: CVE-2008-4330 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the design parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45583 - http://www.securityfocus.com/bid/31402 - https://www.exploit-db.com/exploits/6562
CVE ID: CVE-2008-4331 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45424 - https://www.exploit-db.com/exploits/6563
CVE ID: CVE-2008-4332 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45440 - http://secunia.com/advisories/31977 - https://www.exploit-db.com/exploits/6566 - http://www.securityfocus.com/bid/31405
CVE ID: CVE-2008-4333 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31977 - https://www.exploit-db.com/exploits/6566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45442 - http://www.securityfocus.com/bid/31405
CVE ID: CVE-2008-4334 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31404 - https://www.exploit-db.com/exploits/6568
CVE ID: CVE-2008-4335 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apa_album_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31409 - http://www.vupen.com/english/advisories/2008/2691 - https://www.exploit-db.com/exploits/6572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45433 - https://www.exploit-db.com/exploits/6574
CVE ID: CVE-2008-4336 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apa_album_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31409 - https://www.exploit-db.com/exploits/6572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45432
CVE ID: CVE-2008-4337 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to (1) edit.php and (2) list.php in articles/; (3) list_blogs.php and (4) rankings.php in blogs/; (5) calendar/index.php; (6) calendar.php, (7) index.php, and (8) list_events.php in events/; (9) index.php and (10) list_galleries.php in fisheye/; (11) liberty/list_content.php; (12) newsletters/edition.php; (13) pigeonholes/list.php; (14) recommends/index.php; (15) rss/index.php; (16) s
tent.php; (12) newsletters/edition.php; (13) pigeonholes/list.php; (14) recommends/index.php; (15) rss/index.php; (16) stars/index.php; (17) users/remind_password.php; (18) wiki/orphan_pages.php; and (19) stats/index.php, different vectors than CVE-2007-0526 and CVE-2005-4379. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32014 - http://www.securityfocus.com/bid/31395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45409
CVE ID: CVE-2008-4338 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliant_gallery" permissions to execute arbitrary SQL commands via the (1) nid, (2) qid, (3) state, and possibly (4) user parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45411 - http://www.securityfoc
ttp://secunia.com/advisories/32015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45411 - http://www.securityfocus.com/bid/31387 - http://drupal.org/node/313054 - http://securityreason.com/securityalert/4338 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064662.html - http://www.securityfocus.com/archive/1/496726/100/0/threaded
CVE ID: CVE-2008-4339 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava* binaries." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1 - http://www.symantec.com/avcenter/security/Content/2008.09.24a.html - http://www.securityfocus.com/bid
ey=1-26-239908-1 - http://www.symantec.com/avcenter/security/Content/2008.09.24a.html - http://www.securityfocus.com/bid/31221 - http://www.securitytracker.com/id?1020928 - http://www.vupen.com/english/advisories/2008/2672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45386
CVE ID: CVE-2008-4340 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document containing a carriage return ("\r\n\r\n") argument to the window.open function. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4339 - https://www.exploit-db.com/exploits/6554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45403 - http://secniche.org/gcrds.html - http://www.securityfocus.com/bid/31375 - http://www.securityfocus.co
rabilities/45403 - http://secniche.org/gcrds.html - http://www.securityfocus.com/bid/31375 - http://www.securityfocus.com/archive/1/496688/100/0/threaded
CVE ID: CVE-2008-4341 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2654 - http://www.securityfocus.com/bid/31311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45576 - https://www.exploit-db.com/exploits/6531
CVE ID: CVE-2008-4342 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be
r non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31936 - http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq - https://www.exploit-db.com/exploits/6491 - http://www.vupen.com/english/advisories/2008/2663 - http://www.securityfocus.com/archive/1/497831/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45330 - http://secunia.com/advisories/32455 - http://secunia.com/advisories/31949 - http://www.securityfocus.com/bid/31374 - http://re
/secunia.com/advisories/32455 - http://secunia.com/advisories/31949 - http://www.securityfocus.com/bid/31374 - http://retrogod.altervista.org/9sg_numedia_xpl.html - http://secunia.com/advisories/31950