Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3478 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:34.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2679 - https://www.exploit-db.com/exploits/1983 - http://www.securityfocus.com/bid/18834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27538
CVE ID: CVE-2006-3479 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:33.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a del_block op on the block page in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438703 - http://securityreason.com/securityalert/1205 - http://secunia.com/advisories/20898 - https://exchange.xforce.ibmcloud.com/vulner
ecurityreason.com/securityalert/1205 - http://secunia.com/advisories/20898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27490 - http://www.vupen.com/english/advisories/2006/2615
CVE ID: CVE-2006-3480 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:33.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) com_messages modules. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27521 - http://www.vupen.com/english/advisories/2006/2608 - http://www.securityfocus.com/bid/18742 - http://www.osvdb.org/26917 - http://www.joomla.or
nglish/advisories/2006/2608 - http://www.securityfocus.com/bid/18742 - http://www.osvdb.org/26917 - http://www.joomla.org/content/view/1510/74/ - http://www.osvdb.org/26918 - http://www.osvdb.org/26913 - http://secunia.com/advisories/20874 - http://www.joomla.org/content/view/1511/78/
CVE ID: CVE-2006-3481 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:34.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) "Remember Me" function, (2) "Related Items" module, and the (3) "Weblinks submission". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26910 - http://www.vupen.com/english/advisories/2006/2608 - http://www.osvdb.org/26912 - http://www.securityfocus.com/bid/18742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27520 - ht
vdb.org/26912 - http://www.securityfocus.com/bid/18742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27520 - http://www.osvdb.org/26911 - http://www.joomla.org/content/view/1510/74/ - http://secunia.com/advisories/20874 - http://www.joomla.org/content/view/1511/78/
CVE ID: CVE-2006-3482 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:34.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27016 - http://securitytracker.com/id?1016439 - http://www.securityfocus.com/bid/18840 - http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html - http://secunia.com/advisories/20959 - http://www.vupen.com/english/advisories/2006/2690
CVE ID: CVE-2006-3483 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:33.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers to obtain email addresses of subscribers, configuration information, and the admin username and password via direct requests to (1) list.dat or (2) ml_config.dat. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27017 - http://securitytracker.com/id?1016439 - http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html - http://www.osvdb.org/2701
racker.com/id?1016439 - http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html - http://www.osvdb.org/27018
CVE ID: CVE-2006-3484 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:33.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_cat parameters to (a) admin/create_course.php, show_courses parameter to (b) users/create_course.php, (3) p parameter to (c) documentation/admin/, (4) forgot parameter to (d) password_reminder.php, (5) cat parameter to (e) users/browse.php, or the (6) submit parameter to admin/fix_content.php. Additional Analyst Notes: - CVE Program Container: Reference
.php, or the (6) submit parameter to admin/fix_content.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2691 - http://www.osvdb.org/27021 - http://www.atutor.ca/view/3/8341/1.html - http://secunia.com/advisories/20941 - http://www.osvdb.org/27020 - http://www.osvdb.org/27023 - http://www.osvdb.org/27022 - http://www.securityfocus.com/bid/18857 - http://www.osvdb.org/27019
CVE ID: CVE-2006-3485 State: PUBLISHED Published: 2006-07-10T20:00:00 Last Updated: 2024-08-07T18:30:34.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=586734 - http://secunia.com/advisories/20885 - http://www.osvdb.org/26784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27489 - http://www.securityfocus.com/bid/18745 - http://www.vupen.
https://exchange.xforce.ibmcloud.com/vulnerabilities/27489 - http://www.securityfocus.com/bid/18745 - http://www.vupen.com/english/advisories/2006/2609
CVE ID: CVE-2006-3486 State: PUBLISHED Published: 2006-07-10T21:00:00 Last Updated: 2024-08-07T18:30:34.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called. NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to
ng that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27635 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-12.html - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-23.html - http://bugs.mysql.com/bug.php?id=20622 - http://www.vupen.com/english/advisories/2006/2700
CVE ID: CVE-2006-3487 State: PUBLISHED Published: 2006-07-10T22:00:00Z Last Updated: 2024-09-16T20:31:55.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016421
CVE ID: CVE-2006-3488 State: PUBLISHED Published: 2006-07-10T22:00:00Z Last Updated: 2024-09-16T19:20:23.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016421
CVE ID: CVE-2006-3489 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:34.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20858 - http://securitytracker.com/id?1016400 - http://www.osvdb.org/26875 - http://www.securityfocus.com/bid/18693 - http://www.f-secure.com/security/fsc-2006-4.shtml - http://securitytracker.com/id?10164
ww.securityfocus.com/bid/18693 - http://www.f-secure.com/security/fsc-2006-4.shtml - http://securitytracker.com/id?1016401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27498 - http://www.vupen.com/english/advisories/2006/2573
CVE ID: CVE-2006-3490 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:34.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27502 - http://securitytracker.com/id?1016400 - http://www.securityfocus
://exchange.xforce.ibmcloud.com/vulnerabilities/27502 - http://securitytracker.com/id?1016400 - http://www.securityfocus.com/bid/18693 - http://www.f-secure.com/security/fsc-2006-4.shtml - http://www.osvdb.org/26876 - http://securitytracker.com/id?1016401 - http://www.vupen.com/english/advisories/2006/2573
CVE ID: CVE-2006-3491 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:34.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439455/100/0/threaded - http://marc.info/?l=full-disclosure&m=115220500707900&w=2 - http://www.vupen.com/english/advisories/2006/2696 - http://aluigi.altervista.org/adv/kailleraex-adv.txt - http://secunia.com/advisories/20973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27680 - http
leraex-adv.txt - http://secunia.com/advisories/20973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27680 - http://www.osvdb.org/27041 - http://www.securityfocus.com/bid/18871
CVE ID: CVE-2006-3492 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:34.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause a denial of service (application crash) via a message with an incorrect "object key", which triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439606 - http://secunia.com/advisories/20970 - http://www.securityfocus.com/bid/18869 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047708.html - http://ww
//www.securityfocus.com/bid/18869 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047708.html - http://www.securityfocus.com/archive/1/439655/100/0/threaded - http://www.osvdb.org/27029 - http://securityreason.com/securityalert/1210 - http://www.securityfocus.com/archive/1/439439/100/0/threaded - http://mico.org/down.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27686 - http://www.vupen.com/english/advisories/2006/2709
CVE ID: CVE-2006-3493 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:33.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees. Additional Analyst Notes: - CVE Program Container: References:
ion is not possible, and the original researcher agrees. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18905 - http://www.securityfocus.com/archive/1/439649/100/0/threaded - http://securitytracker.com/id?1016453 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html - http://www.vupen.com/english/advisories/2006/2720 - http://marc.info/?l=full-disclosure&m=115231380526820&w=2 - http://marc.info/?l=full-disclosure&m=115261598510657&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27617 - http://www.securityfocus.com/archive/1/439878/100/0/threaded - http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx
CVE ID: CVE-2006-3494 State: PUBLISHED Published: 2006-07-10T22:00:00 Last Updated: 2024-08-07T18:30:33.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php, (d) delete_event.php, and (e) edit_event.php; and (4) group_id in (f) view_group.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1209 - http://www.osvdb.org/26985 - http://www.osvdb.org/26981 -
References: - http://securityreason.com/securityalert/1209 - http://www.osvdb.org/26985 - http://www.osvdb.org/26981 - http://www.osvdb.org/26990 - http://www.osvdb.org/26991 - http://www.osvdb.org/26988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27514 - http://www.osvdb.org/26989 - http://www.osvdb.org/26982 - http://www.securityfocus.com/bid/18759 - http://www.osvdb.org/26984 - http://www.osvdb.org/26983 - http://www.osvdb.org/26992 - http://www.securityfocus.com/archive/1/438868/100/0/threaded - http://www.osvdb.org/26979 - http://secunia.com/advisories/20933 - http://www.osvdb.org/26993 - http://www.securityfocus.com/archive/1/440144/100/100/threaded - http://www.vupen.com/e
3 - http://www.osvdb.org/26993 - http://www.securityfocus.com/archive/1/440144/100/100/threaded - http://www.vupen.com/english/advisories/2006/2645 - http://www.osvdb.org/26980
CVE ID: CVE-2006-3495 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T18:30:33.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28136 - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-c
sh/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.kb.cert.org/vuls/id/168020 - http://securitytracker.com/id?1016620 - http://www.osvdb.org/27732
CVE ID: CVE-2006-3496 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T18:30:33.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that triggers an unchecked error condition. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28137 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov
sories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.kb.cert.org/vuls/id/180692 - http://securitytracker.com/id?1016620 - http://www.osvdb.org/27733
CVE ID: CVE-2006-3497 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T18:30:33.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.kb.cert.org/vuls/id/514740 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.o
/vuls/id/514740 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.osvdb.org/27735 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html
CVE ID: CVE-2006-3498 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T18:30:33.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to execute arbitrary code via a crafted BOOTP request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28139 - http://www.osvdb.org/27736 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19
//www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.kb.cert.org/vuls/id/776628
CVE ID: CVE-2006-3499 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error (stderr) by privileged applications. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.osvdb.org/27737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28140 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/212
mcloud.com/vulnerabilities/28140 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html
CVE ID: CVE-2006-3500 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28141 - http:/
es/2006/3101 - http://secunia.com/advisories/21253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28141 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.osvdb.org/27738
CVE ID: CVE-2006-3501 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.kb.cert.org/vuls/id/172244 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.osvdb.org
visories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.osvdb.org/27740 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28143
CVE ID: CVE-2006-3502 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289
w.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28144 - http://www.kb.cert.org/vuls/id/651844 - http://www.osvdb.org/27741