Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3422 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, and (5) grns. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27536 - https://www.exploit-db.com/exploits/1982 - http://www.securityfocus.com/bi
e.xforce.ibmcloud.com/vulnerabilities/27536 - https://www.exploit-db.com/exploits/1982 - http://www.securityfocus.com/bid/18821
CVE ID: CVE-2006-3423 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2688 - http://securitytracker.com/id?1016446 - http://secunia.com/advisories/20956 - http://xforce.iss.net/xforce/alerts/id/226 -
tp://securitytracker.com/id?1016446 - http://secunia.com/advisories/20956 - http://xforce.iss.net/xforce/alerts/id/226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24370 - http://www.securityfocus.com/archive/1/439496/100/0/threaded - http://www.osvdb.org/27040 - http://www.securityfocus.com/bid/18860 - http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456 - http://www.osvdb.org/27039 - http://www.zerodayinitiative.com/advisories/ZDI-06-021.html
CVE ID: CVE-2006-3424 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2688 - http://secunia.com/advisories/20956 - http://xforce.iss.net/xforce/alerts/id/226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27786
CVE ID: CVE-2006-3425 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html - http://www.securityfocus.com/archiv
rences: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html - http://www.securityfocus.com/archive/1/438710/100/0/threaded - http://secunia.com/advisories/20876 - http://secunia.com/advisories/20878 - http://securityreason.com/securityalert/1200 - http://www.vupen.com/english/advisories/2006/2596 - http://www.vupen.com/english/advisories/2006/2595 - http://securitytracker.com/id?1016405 - http://www.securityfocus.com/bid/18723
CVE ID: CVE-2006-3426 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html - http://www.securit
m Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html - http://www.securityfocus.com/bid/18732 - http://www.securityfocus.com/archive/1/438710/100/0/threaded - http://secunia.com/advisories/20876 - http://secunia.com/advisories/20878 - http://securityreason.com/securityalert/1200 - http://www.vupen.com/english/advisories/2006/2596 - http://www.vupen.com/english/advisories/2006/2595 - http://securitytracker.com/id?1016405
CVE ID: CVE-2006-3427 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2687 - http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27565 - http://www.osvdb.org/26839 - http:
edgraphicscontrol.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27565 - http://www.osvdb.org/26839 - http://www.securityfocus.com/bid/18855
CVE ID: CVE-2006-3428 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439208/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27563 - http://www.osvdb.org/27036 - http://www.osvdb.org/27035 - http://www.vupen.com/english/advisories/2006/2692 - http://www.securityfocus.com/bid/18844 - http
/www.osvdb.org/27035 - http://www.vupen.com/english/advisories/2006/2692 - http://www.securityfocus.com/bid/18844 - http://secunia.com/advisories/20952
CVE ID: CVE-2006-3429 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in (1) loan.php and (2) mortgage.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439208/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27563 - http://www.vupen.com/english/advisor
39208/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27563 - http://www.vupen.com/english/advisories/2006/2692 - http://www.securityfocus.com/bid/18844 - http://secunia.com/advisories/20952
CVE ID: CVE-2006-3430 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html - http://www.securityfocus.com/archive/1/438710/100/0/threaded - http://secunia.com/advisories/20876 - http://secunia.com/advisories/208
urityfocus.com/archive/1/438710/100/0/threaded - http://secunia.com/advisories/20876 - http://secunia.com/advisories/20878 - http://www.securityfocus.com/bid/18715 - http://securityreason.com/securityalert/1200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27545 - http://www.vupen.com/english/advisories/2006/2596 - http://www.vupen.com/english/advisories/2006/2595 - http://securitytracker.com/id?1016405
CVE ID: CVE-2006-3431 State: PUBLISHED Published: 2006-07-07T18:00:00 Last Updated: 2024-08-07T18:30:33.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086. Additional Analyst Notes: - CVE Program Con
lities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439427/100/0/threaded - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://secunia.com/advisories/20268 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A431 - http://securitytracker.com/id?1016430 - http://marc.info/?l=bugtraq&m=115274676314243&w=2 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/bid/18872 - http://www.vupen.com/
//www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/bid/18872 - http://www.vupen.com/english/advisories/2006/2689 - http://www.securityfocus.com/archive/1/438963/100/0/threaded
CVE ID: CVE-2006-3432 State: REJECTED Published: 2007-01-09T22:00:00 Last Updated: 2007-01-12T10:00:00 Description: No description available.
CVE ID: CVE-2006-3433 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3434 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:30:33.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/234900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A389 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3981 - https://d
://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3981 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062 - http://securitytracker.com/id?1017034 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/bid/20382 - http://secunia.com/advisories/22339
CVE ID: CVE-2006-3435 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T18:30:33.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/187028
g CVE-2006-4694. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/187028 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-06-032.html - http://www.osvdb.org/29446 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A476 - http://www.securityfocus.com/archive/1/448149/100/0/threaded - http://www.securityfocus.com/bid/20304 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3977 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058 - http://securitytracker.com/i
/3977 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058 - http://securitytracker.com/id?1017030
CVE ID: CVE-2006-3436 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T18:30:33.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20337 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3976 - http://securitytracker.com/id?1017029 - http://www.kb.cert.org/vuls/id/455604
.vupen.com/english/advisories/2006/3976 - http://securitytracker.com/id?1017029 - http://www.kb.cert.org/vuls/id/455604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://secunia.com/advisories/22307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377
CVE ID: CVE-2006-3437 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3438 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:30:33.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016659 - http://www.securityfocus.com/bid/19405 - https://oval.cisecurity.org/repository/search/definition/oval%
com/id?1016659 - http://www.securityfocus.com/bid/19405 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115 - http://www.kb.cert.org/vuls/id/683612 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050
CVE ID: CVE-2006-3439 State: PUBLISHED Published: 2006-08-09T01:00:00 Last Updated: 2024-08-07T18:30:33.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314. Additional Analyst Notes: - CVE Program Container: References: - http://www.dhs.gov/dhspublic/display?content=5789 - http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html - https://docs.microsoft.com/en-us/security-updates/securitybull
120/tsd_products_security_response09186a008070c75a.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040 - http://www.kb.cert.org/vuls/id/650769 - http://securitytracker.com/id?1016667 - http://www.securityfocus.com/bid/19409 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28002 - http://www.vupen.com/english/advisories/2006/3210 - http://secunia.com/advisories/21388
CVE ID: CVE-2006-3440 State: PUBLISHED Published: 2006-08-09T01:00:00 Last Updated: 2024-08-07T18:30:33.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041 - http://securitytracker.com/id?1016653 - http://www.vupen.com/english/advisories/2006/3211 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
upen.com/english/advisories/2006/3211 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747 - http://www.securityfocus.com/bid/19319 - http://secunia.com/advisories/21394 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.kb.cert.org/vuls/id/908276
CVE ID: CVE-2006-3441 State: PUBLISHED Published: 2006-08-09T01:00:00 Last Updated: 2024-08-07T18:30:33.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records. Additiona
er response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041 - http://securitytracker.com/id?1016653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28013 - http://xforce.iss.net/xforce/alerts/id/233 - http://xforce.iss.net/xforce/alerts/id/235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28240 - http://www.vupen.com/english/advisories/2006/3211 - http://www.kb.cert.org/vuls/id/794580 - http://secunia.com/advisories/21394 - https://oval.cisecurity.org/repository/search/definition/o
rt.org/vuls/id/794580 - http://secunia.com/advisories/21394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A723 - http://www.osvdb.org/27844 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.securityfocus.com/bid/19404 - http://xforce.iss.net/xforce/alerts/id/234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24586
CVE ID: CVE-2006-3442 State: PUBLISHED Published: 2006-09-12T23:00:00 Last Updated: 2024-08-07T18:30:33.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19922 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-052 - http://www.vupen.com/english/advisories/2006/3563 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A457 - http://www.
ies/2006/3563 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A457 - http://www.kb.cert.org/vuls/id/455516 - http://www.us-cert.gov/cas/techalerts/TA06-255A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28643 - http://secunia.com/advisories/21851 - http://www.securityfocus.com/archive/1/446630/100/100/threaded - http://www.securityfocus.com/archive/1/446630/100/100/threaded - http://securitytracker.com/id?1016827
CVE ID: CVE-2006-3443 State: PUBLISHED Published: 2006-08-09T01:00:00 Last Updated: 2024-08-07T18:30:34.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016662 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
es/securitybulletins/2006/ms06-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A155 - http://secunia.com/advisories/21417 - http://www.vupen.com/english/advisories/2006/3216 - http://www.securityfocus.com/bid/19375 - http://www.kb.cert.org/vuls/id/337244
CVE ID: CVE-2006-3444 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:30:33.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049 - http://securitytracker.com/id?1016658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673 - http://www.vupen.com/english/advisories/2006/3215 - ht
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673 - http://www.vupen.com/english/advisories/2006/3215 - http://secunia.com/advisories/21415 - http://www.securityfocus.com/bid/19388
CVE ID: CVE-2006-3445 State: PUBLISHED Published: 2006-11-14T21:00:00 Last Updated: 2024-08-07T18:30:34.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.vupen.com/english/advisories/2006/4506 - http://secunia.com/advisories/22878 - http://www.securityfocus.com/bid/21
//www.vupen.com/english/advisories/2006/4506 - http://secunia.com/advisories/22878 - http://www.securityfocus.com/bid/21034 - http://www.kb.cert.org/vuls/id/810772 - http://www.securityfocus.com/archive/1/458558/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29945 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-068 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A154 - http://securitytracker.com/id?1017222 - http://www.coseinc.com/alert.html
CVE ID: CVE-2006-3446 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3447 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.