Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4809 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknown impact and attack vectors related to "Active" content. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46217 - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docvie
17 - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docview.wss?uid=swg27014008
CVE ID: CVE-2008-4810 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and (1) a dollar-sign character, aka "php executed in templates;" and (2) a double quoted literal string, aka a "function injection security hole." NOTE: each vector affects slightly different SVN revisions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32329 - http://www.securityfocus.com/bid/3186
otes: - CVE Program Container: References: - http://secunia.com/advisories/32329 - http://www.securityfocus.com/bid/31862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46031 - http://www.debian.org/security/2008/dsa-1691 - http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php - http://securityvulns.ru/Udocument746.html - https://bugs.gentoo.org/attachment.cgi?id=169804&action=view - http://smarty-php.googlecode.com/svn/trunk/NEWS - http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php - http://www.openwall.com/lists/oss-security/2008/10/25/2
CVE ID: CVE-2008-4811 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a \ (backslash) before a dollar-sign character. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46406 - http://www.securityfocus.com/bid/31862 - http://www.debian.org/security/2008/dsa-1691 - http://securityvulns.ru/Udocument746.ht
www.securityfocus.com/bid/31862 - http://www.debian.org/security/2008/dsa-1691 - http://securityvulns.ru/Udocument746.html - http://www.openwall.com/lists/oss-security/2008/10/25/2
CVE ID: CVE-2008-4812 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32700 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46332 - http://www.securityfocus.com/b
cscat=BLTNDETAIL&id=909609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46332 - http://www.securityfocus.com/bid/32100 - http://secunia.com/advisories/35163 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.c
/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
CVE ID: CVE-2008-4813 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498057/100/0/threaded - http://secunia.com/advisories/32700 - http://www.adobe.com/
tp://www.securityfocus.com/archive/1/498057/100/0/threaded - http://secunia.com/advisories/32700 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.zerodayinitiative.com/advisories/ZDI-08-073/ - http://www.securityfocus.com/bid/32100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46344 - http://download.oracle.com/sunalerts/1019937.1.html - http://www.securityfocus.com/archive/1/498056/100/0/threaded - http://secunia.com/advisories/32872 - http://securityreason.com/securityalert/4564 - http://www.zerodayinitiative.com/advisories/ZDI-08-074/ - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.vupen.com/english/advisories/2009/0098 -
/ - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46333 - http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
CVE ID: CVE-2008-4814 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation issue." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32700 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/32100 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - https:
focus.com/bid/32100 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46334 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.skyrecon.com/index.php?option=com_content&task=view&id=302&Itemid=124 - http://www.redhat.com/support/errata/RHSA-2008-0974.html
CVE ID: CVE-2008-4815 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32700 - http://www.securityfocus.com/bid/32100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46335 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - h
om/vulnerabilities/46335 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - https://bugzilla.redhat.com/show_bug.cgi?id=469882 - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0974.html
CVE ID: CVE-2008-4816 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32872 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.open
html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
CVE ID: CVE-2008-4817 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:27.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32700 - http://osvdb.org/49541 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - htt
9937.1.html - http://secunia.com/advisories/32872 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756
CVE ID: CVE-2008-4818 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:28.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444
3390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46531 - http://www.securitytracker.com/id?1021146 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/arch
/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
CVE ID: CVE-2008-4819 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/
elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46532 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/se
A-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://www.securitytracker.com/id?1021147
CVE ID: CVE-2008-4820 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46533 - http://www.securitytracker.com/id?1021148 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
CVE ID: CVE-2008-4821 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - ht
- http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46534 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
ya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://www.securitytracker.com/id?1021149
CVE ID: CVE-2008-4822 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http
curity/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - http://www.securitytracker.com/id?1021150 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46
.apple.com/archives/security-announce//2008//Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46535 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
CVE ID: CVE-2008-4823 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/bid/32129 - http://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/
tp://secunia.com/advisories/33390 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.adobe.com/support/security/bulletins/apsb08-20.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/se
A-2008-440.htm - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://www.securitytracker.com/id?1021151
CVE ID: CVE-2008-4824 State: PUBLISHED Published: 2008-11-17T22:00:00 Last Updated: 2024-08-07T10:31:28.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors." Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://www.securityfocus.com/archive/1/498561/100/0/threaded - http://secunia.com/advisories/33390 - http://www.isecpartners.com/advisories/2008-01-flash.txt - http://supp
/threaded - http://secunia.com/advisories/33390 - http://www.isecpartners.com/advisories/2008-01-flash.txt - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://www.vupen.com/english/advisories/2008/3444 - http://secunia.com/advisories/32702 - http://www.vupen.com/english/advisories/2008/3189 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://secunia.com/advisories/34226 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://support.apple.com/kb/HT3338 - http://osvdb.org/49958 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http
m/support/errata/RHSA-2008-0980.html - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://secunia.com/advisories/32772 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://www.adobe.com/support/security/bulletins/apsb08-22.html
CVE ID: CVE-2008-4825 State: PUBLISHED Published: 2009-04-01T17:00:00 Last Updated: 2024-08-07T10:31:27.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted (1) CIF, (2) C2D, or (3) GI file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32415 - http://www.ezbsystems.com/ultraiso/history.htm - http://www.securitytracker.com/id?1021964 - http://secunia.com/secunia_research/2008-49/ - http://www.securityfocus.com/bid/34325 - http://www.vupen.com/english/advisories/2009/09
com/secunia_research/2008-49/ - http://www.securityfocus.com/bid/34325 - http://www.vupen.com/english/advisories/2009/0903 - http://www.securityfocus.com/archive/1/502323/100/0/threaded
CVE ID: CVE-2008-4826 State: REJECTED Published: 2009-11-16T19:00:00Z Last Updated: 2024-09-16T20:23:02.338Z Description: No description available.
CVE ID: CVE-2008-4827 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T10:31:27.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi