Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1056 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises. Additional Analyst Notes: - CVE Program Container: References: - http://www.mnin.org/advisories/2008_symarkpb.pdf - http://secunia.com/advisories/29111 - http://www.securityfocus.com/bid/28015 - http://www.symark.com
2008_symarkpb.pdf - http://secunia.com/advisories/29111 - http://www.securityfocus.com/bid/28015 - http://www.symark.com/support/PBFeb2008Announcement.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40872
CVE ID: CVE-2008-1057 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27965 - http://secunia.com/advisories/29078 - http://www.vupen.com/english/advisories/2008/0660 - http://www.securitytracker.com/id?1019496 - http://www.openbsd.org/errata42.html#008_ip6rthdr
CVE ID: CVE-2008-1058 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29078 - http://www.openbsd.org/errata42.html#007_tcprespond - http://www.securitytracker.com/id?1019495 - http://www.vupen.com/english/advisories/2008/0660 - http://www.securityfocus.com/bid/27949 - http://www.openbsd
019495 - http://www.vupen.com/english/advisories/2008/0660 - http://www.securityfocus.com/bid/27949 - http://www.openbsd.org/errata41.html#013_tcprespond
CVE ID: CVE-2008-1059 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29099 - https://www.exploit-db.com/exploits/5194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40829 - http://www.securityfocus.com/archive/1/488734/100/0/threaded - http://securityreason.com/securityalert/3706 -
s/40829 - http://www.securityfocus.com/archive/1/488734/100/0/threaded - http://securityreason.com/securityalert/3706 - http://www.securityfocus.com/bid/27985
CVE ID: CVE-2008-1060 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29099 - https://www.exploit-db.com/exploits/5194 - http://www.securityfocus.com/archive/1/488734/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40831 - http://securityreason.com/securityalert/3706 - http://www.securityfocus.com/bid
rce.ibmcloud.com/vulnerabilities/40831 - http://securityreason.com/securityalert/3706 - http://www.securityfocus.com/bid/27985
CVE ID: CVE-2008-1061 State: PUBLISHED Published: 2008-02-28T19:00:00 Last Updated: 2024-08-07T08:08:57.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view/sniplets/, and possibly (d) modules/execute.php; the (2) url parameter to (e) view/admin/submenu.php; and the (3) page parameter to (f) view/admin/pager.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29099 - https://exchang
. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40830 - https://www.exploit-db.com/exploits/5194 - http://www.securityfocus.com/archive/1/488734/100/0/threaded - http://securityreason.com/securityalert/3706 - http://www.securityfocus.com/bid/27985
CVE ID: CVE-2008-1062 State: PUBLISHED Published: 2008-02-28T19:00:00Z Last Updated: 2024-09-16T17:23:29.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted packet with two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28910 - http://www.securityfocus.com/bid/28016
CVE ID: CVE-2008-1063 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T08:08:57.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41001 - http://www.xssing.com/index.php?x=3&y=12
CVE ID: CVE-2008-1064 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T08:08:57.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41013 - http://www.xssing.com/index.php?x=3&y=12
CVE ID: CVE-2008-1065 State: PUBLISHED Published: 2008-02-28T20:00:00Z Last Updated: 2024-09-16T17:58:00.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1) letter or (2) sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27979 - http://secunia.com/advisories/29107 - http://www.xssing.com/index.php?x=3&y=12
CVE ID: CVE-2008-1066 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T08:08:57.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29398 - http://secunia.com/advisories/29241 - http://www.debian.org/security/2008/dsa-1520 - http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652 - http://security.gentoo.org/glsa/glsa-201111-04.xml - http
http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652 - http://security.gentoo.org/glsa/glsa-201111-04.xml - http://www.smarty.net/misc/NEWS - http://secunia.com/advisories/29405 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00551.html - http://secunia.com/advisories/29392 - http://secunia.com/advisories/29839 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41002 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00358.html - http://www.securityfocus.com/bid/28105 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00298.html - http://b
ecurityfocus.com/bid/28105 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00298.html - http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html - http://secunia.com/advisories/29562
CVE ID: CVE-2008-1067 State: PUBLISHED Published: 2008-02-28T21:00:00 Last Updated: 2024-08-07T08:08:57.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29076 - https://www.exploit-db.com/exploits/5173
CVE ID: CVE-2008-1068 State: PUBLISHED Published: 2008-02-28T21:00:00 Last Updated: 2024-08-07T08:08:57.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) Vert/index.php, (2) Noir/index.php, and (3) Bleu/index.php in template/, different vectors than CVE-2008-0645. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27962 - https://www.exploit-db.com/exploits/5182
CVE ID: CVE-2008-1069 State: PUBLISHED Published: 2008-02-28T21:00:00 Last Updated: 2024-08-07T08:08:57.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40776 - https://www.exploit-db.com/exploits/5174 - http://secunia.com/advisories/29077
CVE ID: CVE-2008-1070 State: PUBLISHED Published: 2008-02-28T22:00:00 Last Updated: 2024-08-07T08:08:57.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-32.xml - http://www.redhat.com/support/errata/RHSA-2008-0890.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11378 - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-pack
al%3Adef%3A11378 - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html - http://secunia.com/advisories/29188 - http://secunia.com/advisories/29242 - http://secunia.com/advisories/29511 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.securityfocus.com/archive/1/488967/100/0/threaded - http://www.securitytracker.com/id?1019515 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://secunia.com/advisories/29736 - http://www.vupen.com/english/advisories/2008/277
://secunia.com/advisories/32091 - http://secunia.com/advisories/29736 - http://www.vupen.com/english/advisories/2008/2773 - https://issues.rpath.com/browse/RPL-2296 - http://www.vupen.com/english/advisories/2008/0704 - http://www.securityfocus.com/bid/28025 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14995 - http://secunia.com/advisories/29156 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html - http://secunia.com/advisories/29223
CVE ID: CVE-2008-1071 State: PUBLISHED Published: 2008-02-28T22:00:00 Last Updated: 2024-08-07T08:08:57.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-32.xml - http://www.redhat.com/support/errata/RHSA-2008-0890.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11633 - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-pack
al%3Adef%3A11633 - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html - http://secunia.com/advisories/29188 - http://secunia.com/advisories/29242 - http://secunia.com/advisories/29511 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14784 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.securityfocus.com/archive/1/488967/100/0/threaded - http://www.securitytracker.com/id?1019515 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories
Advisories:rPSA-2008-0092 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://secunia.com/advisories/29736 - http://www.vupen.com/english/advisories/2008/2773 - https://issues.rpath.com/browse/RPL-2296 - http://www.vupen.com/english/advisories/2008/0704 - http://www.securityfocus.com/bid/28025 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:057 - http://secunia.com/advisories/29156 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html - http://secunia.com/advisories/29223
CVE ID: CVE-2008-1072 State: PUBLISHED Published: 2008-02-28T22:00:00 Last Updated: 2024-08-07T08:08:57.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-32.xml - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-package
008-0890.html - http://www.wireshark.org/security/wnpa-sec-2008-01.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html - http://secunia.com/advisories/29188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10188 - http://secunia.com/advisories/29242 - http://secunia.com/advisories/29511 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.securityfocus.com/archive/1/488967/100/0/threaded - http://www.securitytracker.com/id?1019515 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32
isories:rPSA-2008-0092 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://secunia.com/advisories/29736 - http://www.vupen.com/english/advisories/2008/2773 - https://issues.rpath.com/browse/RPL-2296 - http://www.vupen.com/english/advisories/2008/0704 - http://www.securityfocus.com/bid/28025 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:057 - http://secunia.com/advisories/29156 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html - http://secunia.com/advisories/29223
CVE ID: CVE-2008-1073 State: PUBLISHED Published: 2008-02-29T00:00:00 Last Updated: 2024-08-07T08:08:56.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28014 - http://jvn.jp/jp/JVN%2342381549/index.html - http://www.securitytracker.com/id?1019508 - http://secunia.com/advisories/29038 - http://www.vupen.com/english/advisories/2008/0681
CVE ID: CVE-2008-1074 State: PUBLISHED Published: 2008-02-29T00:00:00 Last Updated: 2024-08-07T08:08:57.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28024 - https://www.exploit-db.com/exploits/5197 - http://www.vupen.com/english/advisories/2008/0766 - http://secunia.com/advisories/29134 - http://sourceforge.net/project/shownotes.php?group_id=196032&release_id=581434
CVE ID: CVE-2008-1075 State: PUBLISHED Published: 2008-02-29T00:00:00Z Last Updated: 2024-09-16T20:07:15.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29114 - http://www.securityfocus.com/bid/28028
CVE ID: CVE-2008-1076 State: PUBLISHED Published: 2008-02-29T00:00:00 Last Updated: 2024-08-07T08:08:57.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28029 - http://secunia.com/advisories/29150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40906
CVE ID: CVE-2008-1077 State: PUBLISHED Published: 2008-02-29T00:00:00 Last Updated: 2024-08-07T08:08:57.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28018 - https://www.exploit-db.com/exploits/5195
CVE ID: CVE-2008-1078 State: PUBLISHED Published: 2008-02-29T02:00:00 Last Updated: 2024-08-07T08:08:57.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00273.html - http://bugs.gentoo.org/show_bug.cgi?id=210158 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088 - http://secunia.com/advisories/29144 -
rg/show_bug.cgi?id=210158 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088 - http://secunia.com/advisories/29144 - http://secunia.com/advisories/29694 - http://www.securityfocus.com/archive/1/488931/100/0/threaded - https://issues.rpath.com/browse/RPL-2255 - http://secunia.com/advisories/29187 - http://www.securityfocus.com/bid/28044 - http://www.gentoo.org/security/en/glsa/glsa-200804-09.xml - http://secunia.com/advisories/33400
CVE ID: CVE-2008-1079 State: PUBLISHED Published: 2008-03-04T18:00:00 Last Updated: 2024-08-07T08:08:57.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40982 - http://secunia.com/advisories/29197 - http://www.securityfocus.com/bid/28060 - http://www.securityfocus.com/archive/1/488947/100/0/threaded
CVE ID: CVE-2008-1080 State: PUBLISHED Published: 2008-02-29T02:00:00 Last Updated: 2024-08-07T08:08:57.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29029 - http://www.securityfocus.com/bid/27901 - http://secunia.com/advisories/29152 - http://security.gentoo.org/glsa/glsa-200803-09.xml - http://secunia.com/advisories/29178 - http://www.opera.com/docs/changelogs/linux/926/ - http://www.opera.com/support/search/view/
cunia.com/advisories/29178 - http://www.opera.com/docs/changelogs/linux/926/ - http://www.opera.com/support/search/view/877/ - http://www.vupen.com/english/advisories/2008/0622 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html
CVE ID: CVE-2008-1081 State: PUBLISHED Published: 2008-02-29T02:00:00 Last Updated: 2024-08-07T08:08:57.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29029 - http://www.securityfocus.com/bid/27901 - http://secunia.com/advisories/29152 - http://security.gentoo.org/glsa/glsa-200803-09.xml - http://secunia.com/advisories/29178 - http://www.opera.com/docs/changelogs/linux/926/ - http://www.
glsa-200803-09.xml - http://secunia.com/advisories/29178 - http://www.opera.com/docs/changelogs/linux/926/ - http://www.opera.com/support/search/view/879/ - http://www.vupen.com/english/advisories/2008/0622 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html