Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6971 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify passwords of other users and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44931 - http://www.securityfocus.com/bid/31053 - http://osvdb.org/47945
s://exchange.xforce.ibmcloud.com/vulnerabilities/44931 - http://www.securityfocus.com/bid/31053 - http://osvdb.org/47945 - http://secunia.com/advisories/31750 - https://www.exploit-db.com/exploits/6392 - http://www.simplemachines.org/community/index.php?topic=260145.0
CVE ID: CVE-2008-6972 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the (1) "field label," (2) "help text," or (3) "allowed values" settings. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44915 - http://osvdb.org/47929 - http://secunia.com/advisories/31757 - http://www.securityfocus.com/bid/31027 - h
lities/44915 - http://osvdb.org/47929 - http://secunia.com/advisories/31757 - http://www.securityfocus.com/bid/31027 - http://drupal.org/node/304093
CVE ID: CVE-2008-6973 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T11:49:02.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53084 - http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm - http://www-1.ibm.com/support/docview.wss?uid=swg1LI74127 - http://www-01.ibm.com/support/docview.wss?uid=swg24021397
CVE ID: CVE-2008-6974 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T11:49:02.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters. Additional Analyst Notes: - CVE Program Cont
(4) configure port forwarding via certain from, to, ip, and pro parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/9209 - http://www.securityfocus.com/archive/1/499132 - http://www.securityfocus.com/archive/1/499119 - http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173 - http://www.securityfocus.com/archive/1/499135 - http://www.securityfocus.com/archive/1/499024
CVE ID: CVE-2008-6975 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T11:49:02.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters. NOTE: This issue reportedly exists because of a "weak ..
e port forwarding via certain from, to, ip, and pro parameters. NOTE: This issue reportedly exists because of a "weak ... anti-CSRF fix" implemented in 24 sp2. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/9209 - http://www.securityfocus.com/archive/1/499119 - http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173 - http://www.securityfocus.com/archive/1/499135 - http://www.securityfocus.com/archive/1/499024
CVE ID: CVE-2008-6976 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44944 - http://www.securityfocus.com/bid/31025 - https://www.exploit-db.com/exploits/6366
CVE ID: CVE-2008-6977 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44878 - http://www.securityfocus.com/bid/30996 - http://osvdb.org/47915 - https://www.exploit-db.com/exploits/6420 - https://www.exploit-db.com/exploits/6357
CVE ID: CVE-2008-6978 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31649 - http://www.securityfocus.com/bid/30996 - https://www.exploit-db.com/exploits/6420 - https://www.exploit-db.com/exploits/6357 - http://osvdb.org/47
om/bid/30996 - https://www.exploit-db.com/exploits/6420 - https://www.exploit-db.com/exploits/6357 - http://osvdb.org/47913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44876
CVE ID: CVE-2008-6979 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31057 - http://secunia.com/advisories/31793 - http://www.securityfocus.co
References: - http://www.securityfocus.com/bid/31057 - http://secunia.com/advisories/31793 - http://www.securityfocus.com/archive/1/496069/100/0/threaded - http://www.davidsopas.com/2008/09/phpadult-cms-exploit/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44923 - http://osvdb.org/47943
CVE ID: CVE-2008-6980 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31793 - http://www.securityfocus.com/archive/1/496069/100/0/threaded - http://osvdb.org/47942 - http://www.davidsopas.com/2008/09/phpadult-cms-exploit/ - https://exchange.xfor
00/0/threaded - http://osvdb.org/47942 - http://www.davidsopas.com/2008/09/phpadult-cms-exploit/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44922
CVE ID: CVE-2008-6981 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44924 - http://www.securityfocus.com/archive/1/496069/100/0/threaded - http://www.davidsopas.com/2008/09/phpadult-cms-exploit/
CVE ID: CVE-2008-6982 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/devalcms/files/devalcms/devalcms-1.4b/devalcms-1.4b.zip/download - http://www.securityfocus.com/bid/31037 - http://osvdb.org/47971 - https://www.exploit-db.com/exploits/6369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44940
CVE ID: CVE-2008-6983 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31037 - http://osvdb.org/47972 - https://www.exploit-db.com/exploits/6369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44942
CVE ID: CVE-2008-6984 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as demonstrated using (a) SMTP and qmail, and (b) Courier IMAP and POP3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44856 - http://www.securit
p://www.securitytracker.com/id?1020801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44856 - http://www.securityfocus.com/bid/30956 - http://www.securityfocus.com/archive/1/495881 - http://www.osvdb.org/51652
CVE ID: CVE-2008-6985 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496002/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44917 - http://www.securityfocus.com/archive/1/496032/100/100/threaded - htt
xchange.xforce.ibmcloud.com/vulnerabilities/44917 - http://www.securityfocus.com/archive/1/496032/100/100/threaded - http://www.zen-cart.com/forum/showthread.php?p=604473 - http://secunia.com/advisories/31758 - http://www.securityfocus.com/bid/31023 - http://www.gulftech.org/?node=research&article_id=00129-09042008 - http://www.osvdb.org/48346
CVE ID: CVE-2008-6986 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_product action, a different vulnerability than CVE-2008-6985. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496002/100/0/threaded - http://www.osvdb.org/48347 - http://www.secur
ferences: - http://www.securityfocus.com/archive/1/496002/100/0/threaded - http://www.osvdb.org/48347 - http://www.securityfocus.com/archive/1/496032/100/100/threaded - http://www.zen-cart.com/forum/showthread.php?p=604473 - http://secunia.com/advisories/31758 - http://www.securityfocus.com/bid/31023 - http://www.gulftech.org/?node=research&article_id=00129-09042008
CVE ID: CVE-2008-6987 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in eZoneScripts Dating Website script allows remote attackers to execute arbitrary code via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44959
CVE ID: CVE-2008-6988 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31774 - http://www.osvdb.org/48316 - https://www.exploit-db.com/exploits/6428 - http://www.osvdb.org/48313 - http://www.securityfocus.com/archive/1/496220/100/0/threaded -
loit-db.com/exploits/6428 - http://www.osvdb.org/48313 - http://www.securityfocus.com/archive/1/496220/100/0/threaded - http://www.osvdb.org/48314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45050
CVE ID: CVE-2008-6989 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31774 - https://www.exploit-db.com/exploits/6428 - http://www.osvdb.org/48315 - http://www.securityfocus.com/archive/1/496220/100/0/threaded
CVE ID: CVE-2008-6990 State: PUBLISHED Published: 2009-08-18T10:00:00Z Last Updated: 2024-09-17T03:58:39.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31774 - http://www.osvdb.org/48315
CVE ID: CVE-2008-6991 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL commands via the id_rub_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/47910 - http://www.securityfocus.com/bid/30946 - http://secunia.com/advisories/31669 - https://www.exploit-db.com/exploits/6343
CVE ID: CVE-2008-6992 State: PUBLISHED Published: 2009-08-18T10:00:00Z Last Updated: 2024-09-16T19:40:24.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL. Additional Analyst Notes: - CVE Program Container: References: - http://sla.ckers.org/forum/read.php?16%2C24367 - http://www.greensql.net/security - http://bugs.mysql.com/bug.php?id=39337 - http://osvdb.org/48910 - http://www.greensql.net/node/89 - http://www.greensql.net/node/98
CVE ID: CVE-2008-6993 State: PUBLISHED Published: 2009-08-18T10:00:00Z Last Updated: 2024-09-16T19:30:55.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30973
CVE ID: CVE-2008-6994 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header. Additional Analyst Notes: - CVE Program Container: References: - http://www.i
filename in a Content-Disposition header. Additional Analyst Notes: - CVE Program Container: References: - http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44939 - http://www.securityfocus.com/archive/1/496042/100/0/threaded - https://www.exploit-db.com/exploits/6367 - http://security.bkis.vn/?p=119 - http://code.google.com/p/chromium/issues/detail?id=1414 - http://www.securityfocus.com/bid/31031 - https://www.exploit-db.com/exploits/6365 - http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766 - http://osvdb.org/482
chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766 - http://osvdb.org/48259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44935 - http://www.securityfocus.com/bid/31029 - http://securitytracker.com/id?1020823
CVE ID: CVE-2008-6995 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a "%" (percent) character, which triggers a buffer over-read, as demonstrated using an "about:%" URI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/47908 - https://www.evilfingers.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php - http://archives.neohapsis.com/archives/bugtraq/2008-0
.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php - http://archives.neohapsis.com/archives/bugtraq/2008-09/0028.html - http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/net/base/escape.cc?r1=1757&r2=1760&pathrev=1760 - http://evilfingers.com/advisory/google_chrome_poc.php - http://code.google.com/p/chromium/issues/detail?id=122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44899 - http://www.securityfocus.com/bid/30983 - https://www.exploit-db.com/exploits/6353
CVE ID: CVE-2008-6996 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31000 - http://www.securityfocus.com/archive/1/495987/100/0/threaded - http://co
ces: - http://www.securityfocus.com/bid/31000 - http://www.securityfocus.com/archive/1/495987/100/0/threaded - http://codereview.chromium.org/472/diff/1/2 - http://www.securityfocus.com/archive/1/495942/100/0/threaded - http://www.securityfocus.com/archive/1/495951/100/100/threaded - http://www.securityfocus.com/archive/1/495959/100/100/threaded - http://www.osvdb.org/48261 - http://www.securityfocus.com/archive/1/495954/100/100/threaded - https://www.exploit-db.com/exploits/6355 - http://www.securityfocus.com/archive/1/496049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44904 - http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 - http://www.securityfocus.com/archive/1/49
ilities/44904 - http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 - http://www.securityfocus.com/archive/1/496048/100/100/threaded
CVE ID: CVE-2008-6997 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an "Inspect Element" action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48260 - https://www.exploit-db.com/exploits/6386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44941 - http://badzmanaois.blogspot.com/2008/09/google-chrome-inspect-element-denial-of.html - http://www.securityfoc
es/44941 - http://badzmanaois.blogspot.com/2008/09/google-chrome-inspect-element-denial-of.html - http://www.securityfocus.com/bid/31038
CVE ID: CVE-2008-6998 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44934 - http://src.chromium.org/viewvc/chrome/br