Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2338 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:01.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30265 - http://www.securitytracker.com/id?1020035 - https://www.exploit-db.com/exploits/5616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42427 - http://www.securityfocus.com/bid/29226
CVE ID: CVE-2008-2339 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42467 - http://secunia.com/advisories/30282 - http://securityreason.com/securityalert/3894 - http://www.securityfocus.com/archive/1/492120/100/0/threaded
ries/30282 - http://securityreason.com/securityalert/3894 - http://www.securityfocus.com/archive/1/492120/100/0/threaded - http://www.securityfocus.com/bid/29241
CVE ID: CVE-2008-2340 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid parameter to (d) list_tagitems.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42461 - https://www.exploit-db.com/exploits/5624
CVE ID: CVE-2008-2341 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the read_xml_include parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42459 - https://www.exploit-db.com/exploits/5624
CVE ID: CVE-2008-2342 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42460 - http://www.securityfocus.com/bid/29251 - https://www.exploit-db.com/exploits/5624
CVE ID: CVE-2008-2343 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/info.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42462 - https://www.exploit-db.com/exploits/5624
CVE ID: CVE-2008-2344 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42448 - http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/
CVE ID: CVE-2008-2345 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:01.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42449 - http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/
CVE ID: CVE-2008-2346 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain administrative access by creating an admin account via a direct request to adduser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42502 - http://www.securityfocus.com/bid/29267 - https://www.exploit-db.com/exploits/5645
CVE ID: CVE-2008-2347 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42507 - https://www.exploit-db.com/exploits/5650 - http://www.securityfocus.com/bid/29272
CVE ID: CVE-2008-2348 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and exceed application quotas via a direct request to admin/adduser.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5648 - http://www.securityfocus.com/bid/29271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42503
CVE ID: CVE-2008-2349 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:01.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42476 - https://www.exploit-db.com/exploits/5634 - http://secunia.com/advisories/30062/
CVE ID: CVE-2008-2350 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2008/05/bcoos-highlightphp-traversal-file.html - http://www.securityfocus.com/bid/29275 - http://secunia.com/advisories/30035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42506
CVE ID: CVE-2008-2351 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the (1) lang_id and (2) menu_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29266 - http://www.vupen.com/english/advisories/2008/1562/references - http://secunia.com/advisories/30293 - https://www.exploit-db.com/exploits/5641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42508
CVE ID: CVE-2008-2352 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42498 - http://www.vupen.com/english/advisories/2008/1563/references - http://www.securityfocus.com/archive/1/492227/100/0/threaded - http://www.securityfocus.com/bid/29264 - https://www.exploit-db.com/exploit
yfocus.com/archive/1/492227/100/0/threaded - http://www.securityfocus.com/bid/29264 - https://www.exploit-db.com/exploits/5640 - http://secunia.com/advisories/30138
CVE ID: CVE-2008-2353 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:01.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1560/references - https://www.exploit-db.com/exploits/5647 - http://www.securityfocus.com/bid/29270 - http://secunia.com/advisories/30301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42501
CVE ID: CVE-2008-2354 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the data export function in testMaker before 3.0p10 allows test authors to obtain access to export data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42499 - http://www.securityfocus.com/bid/29273 - http://sourceforge.net/project/shownotes.php?group_id=194778&release_id=599729 - http://secunia.com/advisories/30251
CVE ID: CVE-2008-2355 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the msnum parameter in a coment event. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5637 - http://secunia.com/advisories/30296 - http://www.securityfocus.com/bid/29262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42497 - http://www.vupen.com/english/advisories/2008/1566/ref
262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42497 - http://www.vupen.com/english/advisories/2008/1566/references
CVE ID: CVE-2008-2356 State: PUBLISHED Published: 2008-05-20T10:00:00 Last Updated: 2024-08-07T08:58:02.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42475 - https://www.exploit-db.com/exploits/5635 - http://www.securityfocus.com/bid/29257
CVE ID: CVE-2008-2357 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:01.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30340
lnerability in mtr. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30340 - http://secunia.com/advisories/30522 - http://www.securityfocus.com/archive/1/492260/100/0/threaded - http://secunia.com/advisories/30312 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:176 - http://www.securityfocus.com/bid/29290 - http://security.gentoo.org/glsa/glsa-200806-01.xml - http://www.openwall.com/lists/oss-security/2008/05/21/3 - http://secunia.com/advisories/30967 - http://secunia.com/advisories/30359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42535 - http://www.openwall.com/lists/oss-security/2008/05/21/4 - http://securityreason.com
ibmcloud.com/vulnerabilities/42535 - http://www.openwall.com/lists/oss-security/2008/05/21/4 - http://securityreason.com/securityalert/3903 - http://www.debian.org/security/2008/dsa-1587 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175 - http://seclists.org/fulldisclosure/2008/May/0488.html - http://www.openwall.com/lists/oss-security/2008/05/21/1 - http://www.securitytracker.com/id?1020046 - https://issues.rpath.com/browse/RPL-2558 - ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff
CVE ID: CVE-2008-2358 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T08:58:01.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30000 - http://www.securityfocus.com/bid/29603 - https://bugzilla.redhat.com/show_bug.cgi?id=447389 - http://www.redhat.com/support/errata
.securityfocus.com/bid/29603 - https://bugzilla.redhat.com/show_bug.cgi?id=447389 - http://www.redhat.com/support/errata/RHSA-2008-0519.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://secunia.com/advisories/30849 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9644 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://secunia.com/advisories/30920 - http://www.securitytracker.com/id?1020211 - http://secunia.com/advisories/31107 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html - http://www.ubuntu.com/usn/usn-625-1 - http://www.debian.org/security/2008/dsa-1592 - http:/
ce/2008-July/msg00082.html - http://www.ubuntu.com/usn/usn-625-1 - http://www.debian.org/security/2008/dsa-1592 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/30818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43034
CVE ID: CVE-2008-2359 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:58:02.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42867 - https://bugzilla.redhat.com/show_bug.cgi?id=448557 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html - http://secunia.com/advisories/30399
CVE ID: CVE-2008-2360 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:58:02.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - http://secunia.com/advisories/30629 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9329 -
ia.com/advisories/30629 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9329 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/30664 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:115 - http://www.securityfocus.com/archive/1/493550/100/0/threaded - http://secunia.com/advisories/31025 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=718 - http://rhn.redhat.com/errata/RHSA-2008-0502.html - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/ad
m/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://security.gentoo.org/glsa/glsa-200806-07.xml - http://secunia.com/advisories/30715 - http://secunia.com/advisories/30666 - http://secunia.com/advisories/30627 - http://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - http://www.vupen.com/english/advisories/2008/1803 - http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://securitytracker.com/id?1020243 - h
- http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://securitytracker.com/id?1020243 - http://secunia.com/advisories/30772 - ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2360.diff - http://www.redhat.com/support/errata/RHSA-2008-0503.html - http://secunia.com/advisories/30628 - http://secunia.com/advisories/30659 - http://secunia.com/advisories/31109 - http://www.vupen.com/english/advisories/2008/1983/references - http://secunia.com/advisories/30671 - http://secunia.com/advisories/30809 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:179 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rh
m/security/advisories?name=MDVSA-2008:179 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/30843 - http://www.debian.org/security/2008/dsa-1595 - http://www.ubuntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://rhn.redhat.com/errata/RHSA-2008-0512.html - http://www.securityfocus.com/archive/1/493548/100/0/threaded - http://secunia.com/advisories/30630 - http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml
CVE ID: CVE-2008-2361 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:58:02.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - http://secunia.com/advisories/30629 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-23868
m/browse/RPL-2607 - http://secunia.com/advisories/30629 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/30664 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:115 - http://www.securityfocus.com/archive/1/493550/100/0/threaded - http://secunia.com/advisories/31025 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=719 - http://rhn.redhat.com/errata/RHSA-2008-0502.html - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPS
e/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://security.gentoo.org/glsa/glsa-200806-07.xml - http://secunia.com/advisories/30715 - http://secunia.com/advisories/30666 - http://secunia.com/advisories/30627 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8978 - http://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - http://www.vupen.com/english/advisories/2008/1803 - http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://se
docs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://secunia.com/advisories/30772 - http://www.securityfocus.com/bid/29665 - http://www.redhat.com/support/errata/RHSA-2008-0503.html - http://secunia.com/advisories/30659 - http://secunia.com/advisories/31109 - http://www.vupen.com/english/advisories/2008/1983/references - ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2361.diff - http://secunia.com/advisories/30671 - http://secunia.com/advisories/30809 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:179 - http://securitytracker.com/id?1020244 - http://lists.freedesktop.org/archives/xor
urity/advisories?name=MDVSA-2008:179 - http://securitytracker.com/id?1020244 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/30843 - http://www.debian.org/security/2008/dsa-1595 - http://www.ubuntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://www.securityfocus.com/archive/1/493548/100/0/threaded - http://secunia.com/advisories/30630 - http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml
CVE ID: CVE-2008-2362 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:58:02.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - http://www.securityfocus.co