Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0016 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T07:32:23.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - http://www.securitytracker.com/id?1020913 - https://www.redhat.com/archives/fedora-package-announce/2008-Septem
a-1697 - http://www.securitytracker.com/id?1020913 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=443288 - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://
ttp://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://www.debian.org/security/2008/dsa-1669 - https://bugzilla.mozilla.org/show_bug.cgi?id=451617 - http://www.securityfocus.com/bid/31397 - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 -
32092 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.mozilla.org/security/announce/2008/mfsa2008-37.html - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-0017 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T07:32:23.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.s
l Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - http://www.securitytracker.com/id?1021185 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=443299 - http://www.debian.org/security/2008/dsa-1671 - http://www.securityfocus.com/bid/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://secunia.com/advisories/32713 - http://www.redhat.com/support/errata/RHSA-2008-0977.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://www.mozilla.org/security/announce/2008/mfsa2008-54.
008:230 - http://www.vupen.com/english/advisories/2009/0977 - http://www.mozilla.org/security/announce/2008/mfsa2008-54.html - http://secunia.com/advisories/32695 - http://www.redhat.com/support/errata/RHSA-2008-0978.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://secunia.com/advisories/33433 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://secunia.com/advisories/32694 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319
tp://secunia.com/advisories/32694 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - http://secunia.com/advisories/32853 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11005 - http://secunia.com/advisories/32693 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://secunia.com/advisories/32845 - http://www.iss.net/threats/311.html - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://secunia.com/advisories/32714 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-0020 State: PUBLISHED Published: 2009-07-07T23:00:00 Last Updated: 2024-08-07T07:32:23.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015. Additional Analyst Notes: -
tion, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx - http://secunia.com/advisories/36187 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5850 - http://www.vupen.com/english/advisories/2009/2232 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 - http://www.securitytracker.com/id?1022712 - http://www.iss.net/threats/329.html
CVE ID: CVE-2008-0026 State: PUBLISHED Published: 2008-02-14T11:00:00 Last Updated: 2024-08-07T07:32:24.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27775 - http://secunia.com/advisories/28932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40484 - http://www.cisco.com/en/US/products/products_security
932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40484 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7c.shtml - http://www.securitytracker.com/id?1019404 - http://www.vupen.com/english/advisories/2008/0542
CVE ID: CVE-2008-0027 State: PUBLISHED Published: 2008-01-17T02:00:00 Last Updated: 2024-08-07T07:32:23.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486432/100/0/threaded - http://www.vupen.com/english/advisories/2008/0171 - http://securit
w.securityfocus.com/archive/1/486432/100/0/threaded - http://www.vupen.com/english/advisories/2008/0171 - http://securityreason.com/securityalert/3551 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml - http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39704 - http://www.securitytracker.com/id?1019223 - http://www.securityfocus.com/bid/27313 - http://secunia.com/advisories/28530
CVE ID: CVE-2008-0028 State: PUBLISHED Published: 2008-01-23T20:00:00 Last Updated: 2024-08-07T07:32:23.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml - http://www.securityfocus.com/bid/27418 - http://www.securitytracker.com/id?1019263 - http://www.securi
80123-asa.shtml - http://www.securityfocus.com/bid/27418 - http://www.securitytracker.com/id?1019263 - http://www.securitytracker.com/id?1019262 - http://www.vupen.com/english/advisories/2008/0259 - http://secunia.com/advisories/28625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39862
CVE ID: CVE-2008-0029 State: PUBLISHED Published: 2008-01-23T20:00:00 Last Updated: 2024-08-07T07:32:24.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Velocity System (AVS) before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/39860 - http://www.securityfocus.com/bid/27421 - http://www.vupen.com/english/advisories/2008/0260 - http://www.securitytracker.com/id?1019259
CVE ID: CVE-2008-0030 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-0031 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:32:23.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28502 - http://docs.info.apple.com/article.html?artnum=307301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39695 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/a
rce.ibmcloud.com/vulnerabilities/39695 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html - http://www.vupen.com/english/advisories/2008/0148 - http://www.securityfocus.com/bid/27298 - http://www.securitytracker.com/id?1019221
CVE ID: CVE-2008-0032 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T07:32:23.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28502 - http://docs.info.apple.com/article.html?artnum=307301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39696 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/securit
m/vulnerabilities/39696 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html - http://www.securityfocus.com/bid/27301 - http://www.vupen.com/english/advisories/2008/0148 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=642 - http://www.securitytracker.com/id?1019221
CVE ID: CVE-2008-0033 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T07:32:23.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486413/100/0/threaded - http://secunia.com/advisories/28502 - http://dvlabs.tippingpoint.com/advisory/TPTI-08-01 - http://docs.info.apple.com/artic
p://secunia.com/advisories/28502 - http://dvlabs.tippingpoint.com/advisory/TPTI-08-01 - http://docs.info.apple.com/article.html?artnum=307301 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html - http://www.vupen.com/english/advisories/2008/0148 - http://www.securityfocus.com/bid/27299 - http://www.securitytracker.com/id?1019221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39697
CVE ID: CVE-2008-0034 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:32:24.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39701 - http://docs.info.apple.com/article.html?artnum=307302 - http://www.securitytracker.com/id?1019219 - http://secunia.com/advisories/28497 - http://www.securityfocus.com/bid/27297 - http://lists.apple.com
r.com/id?1019219 - http://secunia.com/advisories/28497 - http://www.securityfocus.com/bid/27297 - http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html - http://www.vupen.com/english/advisories/2008/0147
CVE ID: CVE-2008-0035 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:32:23.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.securityfocus.com/bid/27296 - http://docs.info.a
e.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.securityfocus.com/bid/27296 - http://docs.info.apple.com/article.html?artnum=307302 - http://www.vupen.com/english/advisories/2008/0495/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/39700 - http://secunia.com/advisories/28497 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html - http://www.securitytracker.com/id?1019220 - http://www.vupen.com/english/advisories/2008/0147
CVE ID: CVE-2008-0036 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T07:32:23.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28502 - http://www.vupen.com/english/advisories/2008/2064/references - http://secunia.com/advisories/31034 - http://docs.info.apple.com/article.html?artnum=307301 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/securit
icle.html?artnum=307301 - http://www.us-cert.gov/cas/techalerts/TA08-016A.html - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html - http://www.securityfocus.com/bid/27300 - http://www.vupen.com/english/advisories/2008/0148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39698 - http://www.securitytracker.com/id?1019221
CVE ID: CVE-2008-0037 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:23.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us-cert.gov/cas/tech
n.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://www.securitytracker.com/id?1019365 - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0038 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:24.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us
- http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://www.securitytracker.com/id?1019360 - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0039 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:24.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.securitytracker.com/id?1019361 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archiv
ww.securitytracker.com/id?1019361 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0040 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:23.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.securitytracker
.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.securitytracker.com/id?1019362 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0041 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:23.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.securitytracker.com/id?1019363 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us-cert.gov/cas/t
upen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0042 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:32:23.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/774345 - http://docs.info.apple.com/article.html?artnum=307430 - http://secunia.com/advisories/28891 - http://www.vupen.com/english/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.securitytracker.com/id?10193
glish/advisories/2008/0495/references - http://www.securityfocus.com/bid/27736 - http://www.securitytracker.com/id?1019364 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE ID: CVE-2008-0043 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:32:23.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019307 - http://www.securityfocus.com/bid/27636 - http://docs.info.apple.com/article.html?artnum=307398 - http://secunia.com/advisories/28805 - http://www.vupen.com/english/advisories/2008/0428/references - http://lists.apple.com/archives/security-announce/2008/Feb/msg00000.html