Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3273 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:11.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24498 - http://secunia.com/advisories/25707 - http://osvdb.org/38470
CVE ID: CVE-2007-3274 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38863 - http://securityreason.com/securityalert/2810 - http://www.securityfocus.com/archive/1/471542/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34912
CVE ID: CVE-2007-3275 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25695 - http://osvdb.org/37538 - http://www
Notes: - CVE Program Container: References: - http://secunia.com/advisories/25695 - http://osvdb.org/37538 - http://www.vupen.com/english/advisories/2007/2239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34925 - http://www.securityfocus.com/bid/24507 - http://sourceforge.net/project/shownotes.php?release_id=515127
CVE ID: CVE-2007-3276 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36346 - http://secunia.com/advisories/25712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34923
CVE ID: CVE-2007-3277 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25709 - http://www.securityfocus.com/bid/24508 - http://sourceforge.net/project/shownotes.php?release_id=516776 - http://osvdb.org/37514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34922
CVE ID: CVE-2007-3278 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1460 - http://secunia.com/advisories/28445 - http://www.redhat.com/support/errata/RHSA-2008-0038.html - http://www.securityfocus
ttp://secunia.com/advisories/28445 - http://www.redhat.com/support/errata/RHSA-2008-0038.html - http://www.securityfocus.com/archive/1/471644/100/0/threaded - http://secunia.com/advisories/28454 - http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt - http://secunia.com/advisories/28679 - http://www.vupen.com/english/advisories/2008/0109 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35142 - http://secunia.com/advisories/28376 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 - http://secunia.com/advisories/28437 - http://secunia.com/advisories/28477 - http://secunia.com/advisories/29638 -
97-1 - http://secunia.com/advisories/28437 - http://secunia.com/advisories/28477 - http://secunia.com/advisories/29638 - http://secunia.com/advisories/28479 - http://www.debian.org/security/2008/dsa-1463 - http://www.redhat.com/support/errata/RHSA-2008-0040.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10334 - https://usn.ubuntu.com/568-1/ - http://secunia.com/advisories/28438 - http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf - http://www.securityfocus.com/archive/1/4
http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf - http://www.securityfocus.com/archive/1/471541/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0039.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - http://security.gentoo.org/glsa/glsa-200801-15.xml - http://osvdb.org/40899 - http://www.vupen.com/english/advisories/2008/1071/references
CVE ID: CVE-2007-3279 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:13.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote attackers to create and execute functions, as demonstrated by functions that perform local brute-force password guessing attacks, which may evade intrusion detection. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40900 - http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt - http://www.mandriva.com/security/
//osvdb.org/40900 - http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:188 - http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf - http://www.securityfocus.com/archive/1/471541/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35144
CVE ID: CVE-2007-3280 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:11.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access. Additional Analyst Notes: - CVE Program Container: References: - http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:18
w.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:188 - http://osvdb.org/40901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35145 - http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL.pdf - http://www.securityfocus.com/archive/1/471541/100/0/threaded
CVE ID: CVE-2007-3281 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:13.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Php Hosting Biller 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471642/100/0/threaded - http://securityreason.com/securityalert/2811 - http://www.vupen.com/english/advisories/2007/2248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34941 - http://secunia.com/advisories/25681 - http://www.securityfocus.com/bid/24517 - htt
.ibmcloud.com/vulnerabilities/34941 - http://secunia.com/advisories/25681 - http://www.securityfocus.com/bid/24517 - http://osvdb.org/36374
CVE ID: CVE-2007-3282 State: PUBLISHED Published: 2007-06-19T22:00:00 Last Updated: 2024-08-07T14:14:11.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34849 - https://www.exploit-db.com/exploits/4067 - http://www.securitytracker.com/id?1018251
CVE ID: CVE-2007-3283 State: PUBLISHED Published: 2007-06-19T22:00:00 Last Updated: 2024-08-07T14:14:12.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console. Additional Analyst Notes: - CVE Program Container: References: - http://www.jwz.org/xscreensaver/faq.html#root-lock - http://osvdb.org/36586 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101338-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
arch/document.do?assetkey=1-26-101338-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2037
CVE ID: CVE-2007-3284 State: PUBLISHED Published: 2007-06-19T22:00:00 Last Updated: 2024-08-07T14:14:12.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/06/safari-301-552122-for-windows.html - http://osvdb.org/38869 - http://www.securityfocus.com/bid/24497
CVE ID: CVE-2007-3285 State: PUBLISHED Published: 2007-06-20T19:00:00 Last Updated: 2024-08-07T14:14:12.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-490-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=383478 - http://www.mozilla.org/security/announc
ubuntu.com/usn/usn-490-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=383478 - http://www.mozilla.org/security/announce/2007/mfsa2007-22.html - http://www.vupen.com/english/advisories/2007/4256 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.securitytracker.com/id?1018413 - http://www.securityfocus.com/bid/24447 - http://secunia.com/advisories/28135 - http://secunia.com/advisories/26216 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://osvdb.org/38032 - http://www.novell.com/l
9 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://osvdb.org/38032 - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://secunia.com/advisories/26258 - http://secunia.com/advisories/26271 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://secunia.com/advisories/26204 - http://www.0x000000.com/?i=333
CVE ID: CVE-2007-3286 State: PUBLISHED Published: 2007-09-19T18:00:00 Last Updated: 2024-08-07T14:14:13.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38258 - http://www.securityfocus.com/bid/25707 - http://support.avaya.com/elmodocs2/security/ASA-2007-314.htm
CVE ID: CVE-2007-3288 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34934 - http://securityreason.com/securityalert/2826 - http://osvdb.org/38472 - http://www.securityfocus.com/archive/1/471734/100/0/threaded
CVE ID: CVE-2007-3289 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4084 - http://osvdb.org/38473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34951
CVE ID: CVE-2007-3290 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:13.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37490 - http://www.securityfocus.com/bid/24580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35147 - https://www.exploit-db.com/exploits/4082 - http://secunia.com/advisories/25744
CVE ID: CVE-2007-3291 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:11.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35148 - http://osvdb.org/37491 - https://www.exploit-db.com/exploits/4082 - http://secunia.com/advisories/25744
CVE ID: CVE-2007-3292 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24580 - https://www.exploit-db.com/exploits/4082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35149 - http://osvdb.org/37492
CVE ID: CVE-2007-3293 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24580 - http://osvdb.org/37493 - http://www.vupen.com/english/advisories/2007/2265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34957 - https://www.exploit-db.com/exploits/4082 - http://www.g00ns-forum.net/showthread.php?t=9350 - http://secunia.com/advisories/25744
CVE ID: CVE-2007-3294 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via (1) a long second argument to the tidy_parse_string function or (2) an unspecified vector to the tidy_repair_string function. NOTE: this might only be an issue in environments where vsnprintf is implemented as a wrapper for vsprintf. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25735 - http://osvdb.org/368
itional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25735 - http://osvdb.org/36853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34931 - https://www.exploit-db.com/exploits/4080
CVE ID: CVE-2007-3295 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users to execute arbitrary Perl code via a .. (dot dot) in the userlanguage profile setting, which sets the userlanguage key of the member hash, and is propagated to the language variable in (1) HelpCentre.pl and (2) ICQPager.pl, (3) the use_lang variable in Subs.pl, and the actlang variable in (4) Post.pl and (5) InstantMessage.pl; as demonstrated by pointing userlanguage to the English folder, modifying English/
4) Post.pl and (5) InstantMessage.pl; as demonstrated by pointing userlanguage to the English folder, modifying English/HelpCentre.lng file to contain Perl statements, and then invoking the help action in YaBB.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24529 - http://osvdb.org/37238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34932 - http://secunia.com/advisories/25734 - http://securityreason.com/securityalert/2818 - http://www.securityfocus.com/archive/1/471733/100/0/threaded
CVE ID: CVE-2007-3296 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38474 - http://www.securityfocus.com/bid/24552 - http://www.whsafe.com/Article/ldgg/200706/12375.shtml
CVE ID: CVE-2007-3297 State: PUBLISHED Published: 2007-06-20T21:00:00 Last Updated: 2024-08-07T14:14:12.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[ini_array][EXTLIB_PATH] parameter to (1) msDb.php, (2) modules/MusooTemplateLite.php, or (3) modules/SoundImporter.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37517 - http://osvdb.org/37519 - https://www.exploit-db.com/exploits/4085 - http://osvdb.org/37518 - http://secunia.com/advisories/25751 - http://www.vupen.com/english/advisories/2007/226
s/4085 - http://osvdb.org/37518 - http://secunia.com/advisories/25751 - http://www.vupen.com/english/advisories/2007/2266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34950 - http://www.securityfocus.com/bid/24554
CVE ID: CVE-2007-3298 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:11.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to MessageProcessor.cc and possibly other components. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=108104&release_id=502366 - http://www.vupen.com/english/advisories/2007/2249 - http://osvdb.org/38729 - http://sourceforge.net/forum/forum.php?forum_id=687624 - http://spey.cvs.sourceforge.net/spey/spey/src/MessageProces
9 - http://sourceforge.net/forum/forum.php?forum_id=687624 - http://spey.cvs.sourceforge.net/spey/spey/src/MessageProcessor.cc?view=log
CVE ID: CVE-2007-3299 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:12.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a search string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37478 - http://secunia.com/advisories/25776 - http://www.stedee.id.au/awffull/changes - http://www.stedee.id.au/flyspray/task/10 - http://www.stedee.id.au/pipermail/awffull/2007-May/000365.html - http://www.stedee.id.au/pipermail/awfful
pray/task/10 - http://www.stedee.id.au/pipermail/awffull/2007-May/000365.html - http://www.stedee.id.au/pipermail/awffull/2007-May/000364.html - http://www.stedee.id.au/pipermail/awffull/2007-May/000363.html - http://www.vupen.com/english/advisories/2007/2250 - http://www.securityfocus.com/bid/24587
CVE ID: CVE-2007-3300 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:12.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25738 - http://www.securityfocus.com/bid/24525 - http://www.securitytracker.com/id?1018267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34942 - http://www.f-secure.com/security/fsc-2007-5.shtml - http://osvdb.org/36729 - http://www.securitytrack
rabilities/34942 - http://www.f-secure.com/security/fsc-2007-5.shtml - http://osvdb.org/36729 - http://www.securitytracker.com/id?1018266 - http://www.vupen.com/english/advisories/2007/2247 - http://www.securitytracker.com/id?1018268 - http://osvdb.org/36728