Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
txt - http://www.vupen.com/english/advisories/2006/0899 - http://securitytracker.com/id?1015747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25121 - http://www.osvdb.org/23776
CVE ID: CVE-2006-1164 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17066 - http://hamid.ir/security/nodez.txt - http://www.osvdb.org/23775
CVE ID: CVE-2006-1165 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0909 - http://wiki.splitbrain.org/wiki%3Achanges - https://exchange.xforce.ibmcloud.com/vulnerabilities/25137 - http://www.securityfocus.com/bid/17065 - http://secunia.com/advisories/19186
CVE ID: CVE-2006-1166 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary Lua programs as the user running monotone. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19260 - http://lists.gnu.org/archive/html/monotone-devel/2006-03/msg00062.html - http://www.secur
secunia.com/advisories/19260 - http://lists.gnu.org/archive/html/monotone-devel/2006-03/msg00062.html - http://www.securityfocus.com/bid/17139 - http://www.vupen.com/english/advisories/2006/0990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25294
CVE ID: CVE-2006-1167 State: PUBLISHED Published: 2007-02-06T22:00:00Z Last Updated: 2024-09-16T21:57:22.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19607 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.osvdb.org/24571
CVE ID: CVE-2006-1168 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T17:03:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28315 - http://security.gentoo.org/glsa/glsa-200610-03.xml - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://www.mandriva.c
oo.org/glsa/glsa-200610-03.xml - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:140 - http://secunia.com/advisories/22296 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9373 - http://www.securityfocus.com/bid/19455 - http://downloads.avaya.com/css/P8/documents/100158840 - http://bugs.gentoo.org/show_bug.cgi?id=141728 - http://secunia.com/advisories/21434 - http://www.debian.org/security/2006/dsa-1149 - http://secunia.com/advisories/21467 - http://support.avaya.com/elmodocs2/security/ASA-2006-226.htm - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
avaya.com/elmodocs2/security/ASA-2006-226.htm - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://www.redhat.com/support/errata/RHSA-2006-0663.html - http://www.vupen.com/english/advisories/2006/3234 - http://rhn.redhat.com/errata/RHSA-2012-0810.html - https://bugzilla.redhat.com/show_bug.cgi?id=728536 - http://secunia.com/advisories/22377 - http://secunia.com/advisories/21427 - http://securitytracker.com/id?1016836 - http://secunia.com/advisories/22036 - http://secunia.com/advisories/21880 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:129
CVE ID: CVE-2006-1169 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1170 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1171 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1172 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:03:27.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17852 - http://www.vupen.com/english/advisories/2006/1675 - http://www.kb.cert.org/vuls/id/548689 - http://www.securityfocus.com/archive/1/433079/100/0/threaded - http://securitytracker.com/id?1016034 - https://exchange.xforce.ib
w.securityfocus.com/archive/1/433079/100/0/threaded - http://securitytracker.com/id?1016034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26255 - http://secunia.com/advisories/19968 - http://www.osvdb.org/25282 - http://cirt.dk/advisories/cirt-43-advisory.pdf
CVE ID: CVE-2006-1173 State: PUBLISHED Published: 2006-06-07T23:00:00 Last Updated: 2024-08-07T17:03:28.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only - http://itrc.hp.com/service/cki/docDisplay.do?docId=c0069
p://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 - http://www.debian.org/security/2006/dsa-1155 - http://www.openbsd.org/errata38.html#sendmail2 - http://secunia.com/advisories/20684 - http://www.securityfocus.com/archive/1/442939/100/0/threaded - http://www.vupen.com/english/advisories/2006/2388 - http://secunia.com/advisories/20726 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253 - http://www.vupen.com/english/advisories/2006/2351 - http://secunia.com/advisories/21327 - http://www.redhat.com/support/errata/RHSA-2006-0515.html - http://www.vupen.com/english/advisories/20
advisories/21327 - http://www.redhat.com/support/errata/RHSA-2006-0515.html - http://www.vupen.com/english/advisories/2006/2389 - http://secunia.com/advisories/21647 - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html - https://issues.rpath.com/browse/RPL-526 - http://secunia.com/advisories/20651 - http://secunia.com/advisories/20683 - http://secunia.com/advisories/20650 - http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm - http://secunia.com/advisories/20782 - http://www.vupen.com/english/advisories/2006/3135 - http://securitytracker.com/id?1016295 - http://secunia.com/advisories/20694 - http://secunia.com/advisories/20473 - http://www.vupen.com/english/advisories
95 - http://secunia.com/advisories/20694 - http://secunia.com/advisories/20473 - http://www.vupen.com/english/advisories/2006/2189 - http://www.securityfocus.com/archive/1/440744/100/0/threaded - ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P - http://www.vupen.com/english/advisories/2006/2798 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1 - http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.mandriva.com/security/advisories?name=MDKSA-2006:104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27128 - http://secunia.com/advisories/20673 - http:/
KSA-2006:104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27128 - http://secunia.com/advisories/20673 - http://www.f-secure.com/security/fsc-2006-5.shtml - http://www.securityfocus.com/archive/1/438241/100/0/threaded - http://secunia.com/advisories/21612 - http://secunia.com/advisories/20654 - http://www.vupen.com/english/advisories/2006/2390 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382 - http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml - http://www.securityfocus.com/bid/18433 - http://secunia.com/advisories/20675 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html - ftp://ftp.freebsd.org/pub/FreeB
sories/20675 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc - http://www.securityfocus.com/archive/1/437928/100/0/threaded - http://www.securityfocus.com/archive/1/442939/100/0/threaded - http://www.kb.cert.org/vuls/id/146718 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 - http://secunia.com/advisories/15779 - http://secunia.com/advisories/20641 - http://secunia.com/advisories/20679 - http://www.osvdb.org/26197 - http://secunia.com/advisories/21042 - http://secunia.com/advisories/21160 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only - http://www.sec
http://secunia.com/advisories/21160 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only - http://www.securityfocus.com/archive/1/438330/100/0/threaded
CVE ID: CVE-2006-1174 State: PUBLISHED Published: 2006-05-28T23:00:00 Last Updated: 2024-08-07T17:03:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://secunia.com/advisories/25098 - http://secunia.com/advisories/25894 - http://w
losure/2007-September/065902.html - http://secunia.com/advisories/25098 - http://secunia.com/advisories/25894 - http://www.redhat.com/support/errata/RHSA-2007-0431.html - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/25267 - http://www.redhat.com/support/errata/RHSA-2007-0276.html - http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm - http://www.securityfocus.com/bid/18111 - http://www.securitytracker.com/id?1018221 - http://secunia.com/advisories/25629 - http://cvs.pld.org.pl/shadow/NEWS?rev=1.109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26958 - http://www.kb.cert.org/vuls/id/312692 - http://www.gentoo.org/security/en/glsa/glsa-200
loud.com/vulnerabilities/26958 - http://www.kb.cert.org/vuls/id/312692 - http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml - http://secunia.com/advisories/25896 - http://www.securityfocus.com/archive/1/468336/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807 - http://secunia.com/advisories/26909 - http://secunia.com/advisories/27706 - http://www.vupen.com/english/advisories/2006/2006 - https://issues.rpath.com/browse/RPL-1357 - http://secunia.com/advisories/20506 - http://secunia.com/advisories/20370 - ftp://patches.sgi.com/support/free/security/advisories/200
.com/advisories/20506 - http://secunia.com/advisories/20370 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
CVE ID: CVE-2006-1175 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-07T17:03:28.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WeOnlyDo! SFTP (wodSFTP) ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2064 - http://www.securityfocus.com/bid/18192 - http://www.kb.cert.org/vuls/id/378604 - http://secunia.com/advisories/20361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26752
CVE ID: CVE-2006-1176 State: PUBLISHED Published: 2006-07-08T00:00:00 Last Updated: 2024-08-07T17:03:28.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20969 - http://securitytracker.com/id?1016445 - http://www.kb.cert.org/vuls/id/597721 - http://www.sec
ia.com/advisories/20969 - http://securitytracker.com/id?1016445 - http://www.kb.cert.org/vuls/id/597721 - http://www.securityfocus.com/bid/18921 - http://www.vupen.com/english/advisories/2006/2698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27631 - http://www.kb.cert.org/vuls/id/MIMG-6QKPVH
CVE ID: CVE-2006-1178 State: PUBLISHED Published: 2006-07-29T01:00:00 Last Updated: 2024-08-07T17:03:28.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tamarack MMSd before 7.992 allows remote attackers to cause a denial of service (crash) via malformed RFC1006 (OSI over TCP/IP) packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3080 - http://www.kb.cert.org/vuls/id/JGEI-6RZPUT - http://securitytracker.com/id?1016734 - http://www.securityfocus.com/bid/19202 - http://www.kb.cert.org/vuls/id/372878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28053
CVE ID: CVE-2006-1182 State: PUBLISHED Published: 2006-03-16T01:00:00 Last Updated: 2024-08-07T17:03:28.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015769 - http://www.vupen.com/english/advisories/2006/0956 - http
ontainer: References: - http://securitytracker.com/id?1015769 - http://www.vupen.com/english/advisories/2006/0956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25247 - http://www.securityfocus.com/bid/17113 - http://www.osvdb.org/23924 - http://www.securityfocus.com/archive/1/427730/100/0/threaded - http://securitytracker.com/id?1015768 - http://secunia.com/advisories/19229 - http://securityreason.com/securityalert/588 - http://www.adobe.com/support/techdocs/332989.html
CVE ID: CVE-2006-1183 State: PUBLISHED Published: 2006-03-13T11:00:00 Last Updated: 2024-08-07T17:03:28.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/262-1/ - https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 - http://www.securityfocus.com/bid/17086 - http://www.osvdb.org/23868 - http://www.vupen.com/english/advisories/2006/0927 - https://exchange.xforce.ibmcloud.com/vuln
tp://www.osvdb.org/23868 - http://www.vupen.com/english/advisories/2006/0927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25170 - http://securitytracker.com/id?1015761 - http://secunia.com/advisories/19200
CVE ID: CVE-2006-1184 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:03:28.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1912 - http://www.eeye.com/html/research/advisories/AD20060509b.html - http://www.osvdb.org/25336 - http://securitytracker.com/id?1016047 - http://www.securityfocus.com/bid/17905 - http://www.securityfocus.com/archive/1/433425/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1779 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25558 - http://securityreason.com/securityalert/864 - https://oval.cisecur
/exchange.xforce.ibmcloud.com/vulnerabilities/25558 - http://securityreason.com/securityalert/864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1990 - http://www.vupen.com/english/advisories/2006/1742 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018 - http://secunia.com/advisories/20000
CVE ID: CVE-2006-1185 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18957 - http://securitytracker.com/id?1015900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1677 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A787 - http://www.us-cert.gov/c
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A787 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1711 - http://www.securityfocus.com/bid/17450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25542 - http://www.kb.cert.org/vuls/id/503124 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.vupen.com/english/advisories/2006/1318
CVE ID: CVE-2006-1186 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/959049 - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589 - https://oval.cisecurity.org/repository/search/definitio
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446 - http://securitytracker.com/id?1015900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.securityfocus.com/bid/17453 - http://www.vupen.com/english/advisories/2006/1318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25545 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704 - https://oval.cisecur
545 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A791
CVE ID: CVE-2006-1187 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1188 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435096/30/4710/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1144 - http://secunia.com/advisories/18957 - http://securitytracker.com/id?1015900 - https://oval.cisecurity.org/repository/search/definition/
com/advisories/18957 - http://securitytracker.com/id?1015900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1290 - http://www.kb.cert.org/vuls/id/824324 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1773 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.vupen.com/english/advisories/2006/1318 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1296
CVE ID: CVE-2006-1189 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A792 - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository