Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0976 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary code via a long DVD_TOOLS.OpenDVD property value. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3610 - http://osvdb.org/33732 - https://www.exploit-db.com/exploits/3307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32529 - http://www.shinnai.altervista.org/viewtopic.php?id=41&t_id=30 - http://www.shinnai.altervista.org/moaxb/20070504/actsoft.txt - h
ww.shinnai.altervista.org/viewtopic.php?id=41&t_id=30 - http://www.shinnai.altervista.org/moaxb/20070504/actsoft.txt - http://www.securityfocus.com/bid/22558
CVE ID: CVE-2007-0977 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35764 - https://www.exploit-db.com/exploits/3302
CVE ID: CVE-2007-0978 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in swcons in IBM AIX 5.3 allows local users to gain privileges via long input data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017656 - http://secunia.com/advisories/24154 - http://osvdb.org/33200 - http://www.vupen.com/english/advisories/2007/0617 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32508
CVE ID: CVE-2007-0979 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file contents) via a "crafted URL." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33210 - http://secunia.com/advisories/24170 - http://www.lifetype.net/blog/lifetype-development-journal/releases - http://www.securityfocus.com/bid/22572 - http://www.vupen.com/english/advisories/2007/0616
CVE ID: CVE-2007-0980 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Serviceguard for Linux; packaged for SuSE SLES8 and United Linux 1.0 before SG A.11.15.07, SuSE SLES9 and SLES10 before SG A.11.16.10, and Red Hat Enterprise Linux (RHEL) before SG A.11.16.10; allows remote attackers to obtain unauthorized access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017655 - http://www.securityfocus.com/bid/22574 - http://secunia.com/advisories/24134 - http://h20000.www2.hp.com/bizsupport/Tec
http://www.securityfocus.com/bid/22574 - http://secunia.com/advisories/24134 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00860750 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00860750 - http://www.vupen.com/english/advisories/2007/0619 - http://osvdb.org/33201
CVE ID: CVE-2007-0981 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - https://bugzilla.mozilla.org/show_bug.cgi?id=370445 - http://secunia.com
redhat.com/support/errata/RHSA-2007-0078.html - https://bugzilla.mozilla.org/show_bug.cgi?id=370445 - http://secunia.com/advisories/24395 - http://www.osvdb.org/32104 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.securityfocus.com/archive/1/460126/100/200/threaded - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://www.securityfocus.com/archive/1/460217/100/0/threaded - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/2
ckware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/24384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32533 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://www.debian.org/security/2007/dsa-1336 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9730 - http://www.vupen.com/english/advisories/2007/0718 - http://www.kb.cert.org/vuls/id/885753 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://securityreason.com/securityalert/2262
http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://securityreason.com/securityalert/2262 - http://secunia.com/advisories/24320 - http://secunia.com/advisories/25588 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://h
tp://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://secunia.com/advisories/24175 - http://www.securityfocus.com/bid/22566 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/2
com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://securitytracker.com/id?1017654 - http://secunia.com/advisories/24455 - http://www.mozilla.org/security/announce/2007/mfsa2007-07.html - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://www.vupen.com/english/advisories/2007/0624 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://lcamtuf.dione.cc/ffhostname.html - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0982 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.php in TaskFreak! 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24123 - http://osvdb.org/33120 - http://www.taskfreak.com/versions.html - http://www.securityfocus.com/bid/22537
CVE ID: CVE-2007-0983 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the Root_To_Script parameter. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-February/001312.html - https://www.exploit-db.com/exploits/3297 - http://www.vupen.com/english/advisories/2007/0606 - http://secunia.com/advisories/24141 - http://osvdb.org/33209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32453
CVE ID: CVE-2007-0984 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_poll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to pollmentorres.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33192 - http://secunia.com/advisories/24137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32456 - http://www.vupen.com/english/advisories/2007/0601 - https://www.exploit-db.com/exploits/3301 - http://www.securityfocus.com/bid/22542
CVE ID: CVE-2007-0985 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary SQL commands via the npid parameter in a sign_gb action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3299 - http://www.vupen.com/english/advisories/2007/0602 - http://www.securityfocus.com/bid/22540 - http://osvdb.org/35129
CVE ID: CVE-2007-0986 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter. Additional Analyst Notes: - CVE Program Container: References: - http://mgsdl.free.fr/advisories/12070214.txt - http://www.securityfocus.com/bid/22560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32519 - http://www.securityfocus.com/archive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/thread
ttp://www.securityfocus.com/archive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://www.acid-root.new.fr/advisories/12070214.txt - http://osvdb.org/33730 - https://www.exploit-db.com/exploits/3309
CVE ID: CVE-2007-0987 State: PUBLISHED Published: 2007-02-16T11:00:00 Last Updated: 2024-08-07T12:43:21.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot), or an absolute pathname, in the n parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33731 - http://mgsdl.free.fr/advisories/12070214.txt - http://www.securityfocus.com/bid/22560 - http://www.securityfocus.com/archive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://www.acid-root.new.f
hive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://www.acid-root.new.fr/advisories/12070214.txt - https://www.exploit-db.com/exploits/3309
CVE ID: CVE-2007-0988 State: PUBLISHED Published: 2007-02-20T17:00:00 Last Updated: 2024-08-07T12:43:22.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.us.debian.org/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.t
iner: References: - http://www.us.debian.org/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.trustix.org/errata/2007/0009/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html - http://secunia.com/advisories/24195 - http://www.vupen.com/english/advisories/2007/1991 - http://secunia.com/advisories/25056 - http://www.securitytracker.com/id?1017671 - http://www.php-security.org/MOPB/MOPB-05-2007.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://www.php.net/releases/5_2_1.php - http://secunia.com/advisories/24606 - http://securityreason.com/securityalert/2315 - http://secunia.com/advisories/24
- http://secunia.com/advisories/24606 - http://securityreason.com/securityalert/2315 - http://secunia.com/advisories/24642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32709 - http://secunia.com/advisories/24217 - http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm - http://secunia.com/advisories/24248 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - https://issues.rpath.com/browse/RPL-1088 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://osvdb.org/32762 - http://security.gentoo.org/glsa/glsa-2
advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://osvdb.org/32762 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858 - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - http://rhn.redhat.com/errata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - http://www.securityfocus.com/archi
rata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - http://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://www.redhat.com/support/errata/RHSA-2007-0082.html - http://secunia.com/advisories/25850 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0
ity/advisories/2007_32_php.html - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0081.html - http://secunia.com/advisories/24322 - http://secunia.com/advisories/24236
CVE ID: CVE-2007-0989 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0990 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0991 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0992 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0993 State: REJECTED Published: 2007-06-05T21:00:00Z Last Updated: 2024-09-16T21:08:18.193Z Description: No description available.
CVE ID: CVE-2007-0994 State: PUBLISHED Published: 2007-03-06T00:00:00 Last Updated: 2024-08-07T12:43:21.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - https://oval.cisecurity.org/repository/
tainer: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749 - http://secunia.com/advisories/24395 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://www.debian.org/security/2007/dsa-1336 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/24650 - http://www.mozilla.org/security/announce/2007/mfsa2007-09.html - http://secunia.com
ttp://secunia.com/advisories/24650 - http://www.mozilla.org/security/announce/2007/mfsa2007-09.html - http://secunia.com/advisories/25588 - https://issues.rpath.com/browse/RPL-1103 - http://securitytracker.com/id?1017726 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://www.vupen.com/english/advisories/2007/0823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24455 - ftp://patches.sgi.com/sup
com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24455 - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.securityfocus.com/bid/22826
CVE ID: CVE-2007-0995 State: PUBLISHED Published: 2007-02-26T19:00:00 Last Updated: 2024-08-07T12:43:21.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://secunia.com/advisories/24395 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RH
ocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://ha.ckers.org/xss.html#XSS_Non_alpha_non_digit2 - http://secunia.com/advisories/24343 - http://www.debian.org/security/2007/dsa-1336 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mozilla.org/security/announce/2007/mf
00.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://www.vupen.com/english/advisories/2007/0718 - http://secunia.com/advisories/24650 - http://www.osvdb.org/32111 - http://www.ubuntu.com/usn/usn-428-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10164 - http://secunia.com/advisories/24320 - http://secunia.com/advisories/25588 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/461809/100/0/threaded - htt
- http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.c
A-2007-0097.html - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://secunia.com/advisories/24455 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://osvdb.org/32112 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.re
32112 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0996 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:21.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://secunia.com/advisories/24395 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008
cunia.com/advisories/24395 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10086 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://www.debian.org/security/2007/dsa-1336 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://w