Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2007/0719 - http://www.ubuntu.com/usn/usn-431-1 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10174 - http://secunia.com/advisories/24389 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24410 - http://www.osvdb.org/32106 - http://secunia.com/advisories/24333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32663 - http://www.vupen.com/english/advisories/2007/214
es/24333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32663 - http://www.vupen.com/english/advisories/2007/2141 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://www.securityfocus.com/bid/64758 - http://secunia.com/advisories/24290 - http://secunia.com/advisories/24455 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html
CVE ID: CVE-2007-0010 State: PUBLISHED Published: 2007-01-24T19:00:00 Last Updated: 2024-08-07T12:03:36.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23984 - http://secunia.com/advisories/24095 - http://www.redhat.com/support/errata/RHSA-2007-0019.html - https://issues.rpath.com/browse/RPL-984 - http://secunia.com/advisories/23933 - http://securitytracker.com/id?1017552 - http://osvdb.org/31621 - http:
e/RPL-984 - http://secunia.com/advisories/23933 - http://securitytracker.com/id?1017552 - http://osvdb.org/31621 - http://secunia.com/advisories/24006 - http://www.ubuntu.com/usn/usn-415-1 - http://www.vupen.com/english/advisories/2007/0331 - http://secunia.com/advisories/24010 - http://www.novell.com/linux/security/advisories/2007_02_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10325 - http://www.securityfocus.com/bid/22209 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218932 - http://secunia.com/advisories/23935 - https://www.debian.org/security/2007/dsa-1256 - http://secunia.com/advisories/23884 - http://www.mandriva.com/securit
- https://www.debian.org/security/2007/dsa-1256 - http://secunia.com/advisories/23884 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:039
CVE ID: CVE-2007-0011 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T12:03:36.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2583 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - http://osvdb.org/45288 - h
es/2007/2583 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - http://osvdb.org/45288 - http://securitytracker.com/id?1018435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35510 - http://support.citrix.com/article/CTX112803 - http://www.securityfocus.com/archive/1/482626/100/100/threaded - http://support.citrix.com/article/CTX113814
CVE ID: CVE-2007-0012 State: PUBLISHED Published: 2008-01-09T23:00:00 Last Updated: 2024-08-07T12:03:37.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed to the JVM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485942/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39549 - http://www.securityfocus.com/bid/27185 - http://secur
ded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39549 - http://www.securityfocus.com/bid/27185 - http://securityreason.com/securityalert/3527
CVE ID: CVE-2007-0014 State: PUBLISHED Published: 2007-01-17T00:00:00 Last Updated: 2024-08-07T12:03:36.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456734/100/0/threaded - http://www.securityfocus.com/archive/1/456712/100/0/threaded - http://osvdb.org/33473
CVE ID: CVE-2007-0015 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T12:03:37.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/442497 - http://lists.apple.com/archives/Security-announce/2007/Jan/msg00000.html - http://isc.sans.org/diary.html?storyid=2094 - http://www.osvdb.org/31023 - http://www.us-cert.gov/cas/techalerts/TA07-005A.html - http://secunia.com/blog/7/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31203 - http://secunia.co
-005A.html - http://secunia.com/blog/7/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31203 - http://secunia.com/advisories/23540 - http://www.securityfocus.com/bid/21829 - https://www.exploit-db.com/exploits/3064 - http://docs.info.apple.com/article.html?artnum=304989 - http://projects.info-pull.com/moab/MOAB-01-01-2007.html - http://www.vupen.com/english/advisories/2007/0001 - http://landonf.bikemonkey.org/code/macosx/MOAB_Day_1.20070102060815.15950.zadder.local.html - http://securitytracker.com/id?1017461
CVE ID: CVE-2007-0016 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T12:03:36.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a LST file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22959 - https://www.exploit-db.com/exploits/4051 - http://www.securityfocus.com/bid/21840 - http://osvdb.org/32547
CVE ID: CVE-2007-0017 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T12:03:36.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file. Additional Analyst Notes: - CVE Program Container: Referen
nvalid URI, as demonstrated by a udp://-- URI in an M3U file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21852 - http://www.vupen.com/english/advisories/2007/0026 - http://secunia.com/advisories/23971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31226 - http://osvdb.org/31163 - http://www.novell.com/linux/security/advisories/2007_13_xine.html - http://securitytracker.com/id?1017464 - http://secunia.com/advisories/23829 - http://www.videolan.org/patches/vlc-0.8.6-MOAB-02-01-2007.patch - http://secunia.com/advisories/23592 - http://secunia.com/advisories/23910 - http://applefun.blogspot.com/2007/01/moab-02-01-2007-vlc-media-playe
ories/23592 - http://secunia.com/advisories/23910 - http://applefun.blogspot.com/2007/01/moab-02-01-2007-vlc-media-player-udp.html - http://security.gentoo.org/glsa/glsa-200701-24.xml - http://projects.info-pull.com/moab/MOAB-02-01-2007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14313 - http://www.videolan.org/sa0701.html - http://trac.videolan.org/vlc/changeset/18481 - http://www.via.ecp.fr/via/ml/vlc-devel/2007-01/msg00005.html - http://www.debian.org/security/2007/dsa-1252 - http://landonf.bikemonkey.org/code/macosx/MOAB_Day_2.20070103045559.6753.timor.html
CVE ID: CVE-2007-0018 State: PUBLISHED Published: 2007-01-24T21:00:00 Last Updated: 2024-08-07T12:03:36.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6
; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Edit
l CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23546 - http://www.security
ditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23546 - http://www.securityfocus.com/bid/23892 - http://secunia.com/secunia_research/2007-7/advisory/ - http://secunia.com/advisories/23535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31707 - http://secunia.com/secunia_research/2007-12/advisory/ - http://secunia.com/advisories/23562 - http://secunia.com/secunia_research/2007-27/advisory/ - http://secunia.com/advisories/23536 - http://secunia.com/advisories/30459 - http://secunia.com/advisories/30406 - http://secunia.com/secunia_research/2007-29/advisory/ - http://secunia.com/secunia_research/2007-24/advisory/ - http://secunia.com/secunia_r
ecunia_research/2007-29/advisory/ - http://secunia.com/secunia_research/2007-24/advisory/ - http://secunia.com/secunia_research/2007-8/advisory/ - http://secunia.com/secunia_research/2007-9/advisory/ - http://secunia.com/secunia_research/2007-13/advisory/ - http://secunia.com/secunia_research/2007-20/advisory/ - http://secunia.com/advisories/23553 - http://secunia.com/advisories/23551 - http://secunia.com/advisories/23485 - http://secunia.com/secunia_research/2007-50/advisory/ - http://secunia.com/advisories/23550 - http://secunia.com/secunia_research/2007-16/advisory/ - http://secunia.com/advisories/30447 - http://secunia.com/secunia_research/2007-28/advisory/ - http://secunia.com/advisorie
tp://secunia.com/advisories/30447 - http://secunia.com/secunia_research/2007-28/advisory/ - http://secunia.com/advisories/23541 - http://secunia.com/advisories/26046 - http://secunia.com/advisories/23534 - http://secunia.com/secunia_research/2007-15/advisory/ - http://secunia.com/secunia_research/2007-10/advisory/ - http://secunia.com/secunia_research/2007-4/advisory/ - http://secunia.com/secunia_research/2007-18/advisory/ - http://secunia.com/secunia_research/2007-23/advisory/ - http://secunia.com/advisories/23516 - http://secunia.com/secunia_research/2007-14/advisory/ - http://secunia.com/secunia_research/2007-19/advisory/ - http://secunia.com/advisories/25993 - http://secunia.com/secunia_
ttp://secunia.com/secunia_research/2007-19/advisory/ - http://secunia.com/advisories/25993 - http://secunia.com/secunia_research/2007-17/advisory/ - http://secunia.com/secunia_research/2007-31/advisory/ - http://secunia.com/advisories/23495 - http://secunia.com/secunia_research/2007-32/advisory/ - http://secunia.com/advisories/23558 - http://secunia.com/secunia_research/2007-33/advisory/ - http://secunia.com/advisories/23544 - http://www.securityfocus.com/archive/1/457936/100/200/threaded - http://secunia.com/advisories/23530 - http://secunia.com/advisories/23795 - http://secunia.com/secunia_research/2007-3/advisory/ - http://secunia.com/advisories/23543 - http://secunia.com/advisories/23552
ecunia.com/secunia_research/2007-3/advisory/ - http://secunia.com/advisories/23543 - http://secunia.com/advisories/23552 - http://secunia.com/blog/6/ - http://secunia.com/advisories/23475 - http://secunia.com/advisories/23560 - http://secunia.com/advisories/30439 - http://www.securityfocus.com/archive/1/457940/100/200/threaded - http://secunia.com/secunia_research/2007-25/advisory/ - http://secunia.com/advisories/26100 - http://secunia.com/secunia_research/2007-34/advisory/ - http://www.securityfocus.com/archive/1/457965/100/200/threaded - http://secunia.com/secunia_research/2007-21/advisory/ - http://secunia.com/advisories/23548 - http://secunia.com/advisories/30446 - http://secunia.com/adv
h/2007-21/advisory/ - http://secunia.com/advisories/23548 - http://secunia.com/advisories/30446 - http://secunia.com/advisories/30424 - http://secunia.com/advisories/23561 - http://secunia.com/advisories/23557 - http://secunia.com/secunia_research/2007-6/advisory/ - http://secunia.com/secunia_research/2007-30/advisory/ - http://secunia.com/advisories/23745 - http://secunia.com/advisories/28407 - http://secunia.com/advisories/23493 - http://secunia.com/advisories/23511 - http://www.vupen.com/english/advisories/2007/0310 - http://secunia.com/advisories/23565 - http://secunia.com/secunia_research/2007-5/advisory/ - http://secunia.com/secunia_research/2007-11/advisory/ - http://secunia.com/secun
com/secunia_research/2007-5/advisory/ - http://secunia.com/secunia_research/2007-11/advisory/ - http://secunia.com/secunia_research/2007-22/advisory/ - http://secunia.com/secunia_research/2007-26/advisory/ - http://secunia.com/advisories/22922 - http://secunia.com/advisories/30450 - http://secunia.com/secunia_research/2007-2/advisory/ - http://secunia.com/advisories/23568 - http://secunia.com/advisories/23532 - http://secunia.com/advisories/26101 - http://secunia.com/advisories/23753 - http://secunia.com/advisories/23542 - http://www.kb.cert.org/vuls/id/292713 - http://secunia.com/advisories/23554 - http://www.securityfocus.com/bid/22196
CVE ID: CVE-2007-0019 State: PUBLISHED Published: 2007-01-19T21:00:00 Last Updated: 2024-08-07T12:03:36.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-18-01-2007.html - http://osvdb.org/32689 - http://osvdb.org/32692 - http://secunia.com/advisories/23842 - https:
ab/MOAB-18-01-2007.html - http://osvdb.org/32689 - http://osvdb.org/32692 - http://secunia.com/advisories/23842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31594
CVE ID: CVE-2007-0020 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:03:36.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31673 - http://www.securityfocus.com/bid/22145 - http://secunia.com/advisories/23861 - http://projects.info-pull.com/moab/MOAB-19-01-2007.html - https://www.exploit-db.com/exploits/3160 - http://www.vupen.com/english/advisories/2007/0273
oab/MOAB-19-01-2007.html - https://www.exploit-db.com/exploits/3160 - http://www.vupen.com/english/advisories/2007/0273 - http://osvdb.org/32694
CVE ID: CVE-2007-0021 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:03:37.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in an aim:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html - http://projects.info-pull.com/moab/MOAB-20-01-2007.html - http://www.us-cert.gov/cas/techalerts/TA07-047A.html - http://secunia.com/advisories/24198 - http://
B-20-01-2007.html - http://www.us-cert.gov/cas/techalerts/TA07-047A.html - http://secunia.com/advisories/24198 - http://www.securitytracker.com/id?1017661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31679 - http://www.vupen.com/english/advisories/2007/0274 - http://www.kb.cert.org/vuls/id/794752 - http://docs.info.apple.com/article.html?artnum=305102 - http://www.securityfocus.com/bid/22146 - http://osvdb.org/32715
CVE ID: CVE-2007-0022 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:03:37.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23793 - http://secunia.com/advisories/24966 - http://projects.info-pull.com/moab/MOAB-21-01-2007.html - http://docs.info.apple.com/article.html?artnum=305391 - http://www.osvdb.org/31605 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://www.se
e.html?artnum=305391 - http://www.osvdb.org/31605 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://www.securitytracker.com/id?1017941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31677 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http://www.vupen.com/english/advisories/2007/0074 - http://www.securityfocus.com/bid/22148
CVE ID: CVE-2007-0023 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:03:36.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa applications attempt to notify the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32695 - http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html - http://www.us-cert.gov/cas/techale
rg/32695 - http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA07-047A.html - http://secunia.com/advisories/24198 - http://docs.info.apple.com/article.html?artnum=305102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31676 - http://securitytracker.com/id?1017542 - http://www.kb.cert.org/vuls/id/315856 - http://projects.info-pull.com/moab/MOAB-22-01-2007.html - http://secunia.com/advisories/23846 - http://www.vupen.com/english/advisories/2007/0074 - http://www.securityfocus.com/bid/22188
CVE ID: CVE-2007-0024 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:37.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0
bility." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0129 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-004 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://www.securityfocus.com/bid/21930 - http://www.kb.cert.org/vuls/id/122084 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1058 - http://secunia.com/advisories/23677 - http://securitytracker.com/id?1017489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31287 - http://www.securityfocus.com/archive/1/457053/100/0/thread
https://exchange.xforce.ibmcloud.com/vulnerabilities/31287 - http://www.securityfocus.com/archive/1/457053/100/0/threaded - http://www.vupen.com/english/advisories/2007/0105 - http://www.osvdb.org/31250 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.securityfocus.com/archive/1/457164/100/0/threaded - http://support.microsoft.com/?kbid=929969 - http://support.avaya.com/elmodocs2/security/ASA-2007-009.htm - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=462
CVE ID: CVE-2007-0025 State: PUBLISHED Published: 2007-02-13T20:00:00 Last Updated: 2024-08-07T12:03:36.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/932041 - https://docs.microsoft.com/en-us/security-updates/se