Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/1/485268/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38725 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-063 - http://www.securitytracker.com/id?1019072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4208 - http://www.securityfocus.com/bid/26777 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.kb.cert.org/vuls/id/520465 - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://secunia.com/advisories/27997
CVE ID: CVE-2007-5352 State: PUBLISHED Published: 2008-01-08T20:00:00 Last Updated: 2024-08-07T15:24:42.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-002 - http://www.us-cert.gov/cas/techalerts/TA08-008A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39233 - http://secunia.com/advisories/28
echalerts/TA08-008A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39233 - http://secunia.com/advisories/28341 - http://www.vupen.com/english/advisories/2008/0070 - http://securitytracker.com/id?1019165 - http://www.kb.cert.org/vuls/id/410025 - http://www.securityfocus.com/bid/27099 - http://www.securityfocus.com/archive/1/486317/100/0/threaded - http://www.securityfocus.com/archive/1/486317/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5408
CVE ID: CVE-2007-5353 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-5354 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-5355 State: PUBLISHED Published: 2007-12-05T11:00:00 Last Updated: 2024-08-07T15:24:42.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured, resolves an unqualified wpad hostname in a second-level domain outside this configured DNS domain, which allows remote WPAD servers to conduct man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4064 - http://www.securityfocus.com/bid/26686 - http://www.microsoft.com/technet/security/
n.com/english/advisories/2007/4064 - http://www.securityfocus.com/bid/26686 - http://www.microsoft.com/technet/security/advisory/945713.mspx - http://www.securitytracker.com/id?1019033 - http://secunia.com/advisories/27901 - http://support.microsoft.com/kb/945713
CVE ID: CVE-2007-5356 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-5357 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-5358 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:57.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, might allow (1) remote attackers to execute arbitrary code via a long combination of Content-type and Content-description headers, or (2) local users to execute arbitrary code via a long combination of astspooldir, voicemail context, and voicemail mailbox fields. NOTE: vector 2 requires write access to Asterisk configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.d
ess to Asterisk configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.digium.com/pub/security/AST-2007-022.html - http://osvdb.org/38201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37052 - http://osvdb.org/38202 - http://secunia.com/advisories/27184 - http://www.securitytracker.com/id?1018804 - http://www.securityfocus.com/bid/26005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37051 - http://www.securityfocus.com/archive/1/481996/100/0/threaded - http://www.vupen.com/english/advisories/2007/3454
CVE ID: CVE-2007-5360 State: PUBLISHED Published: 2008-01-08T20:00:00 Last Updated: 2024-08-07T15:31:57.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39524 - http://www.novell.com/linux/security/advisor
tyalert/3538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39524 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advisories/29986 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360 - http://www.securityfocus.com/archive/1/485936/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-January/001879.html - http://www.vupen.com/english/advisories/2008/0063 - http://lists.vmware.com/pipermail/security-announce/2008/000002.html - http://secunia.com/advisories/28368 - http://www.vupen.com/english/advisories/2008/1391/references - http:/
00002.html - http://secunia.com/advisories/28368 - http://www.vupen.com/english/advisories/2008/1391/references - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 - http://secunia.com/advisories/28636 - http://secunia.com/advisories/28358 - http://www.vmware.com/security/advisories/VMSA-2008-0001.html - http://www.vupen.com/english/advisories/2008/0064 - http://www.securityfocus.com/archive/1/486859/100/0/threaded
CVE ID: CVE-2007-5361 State: PUBLISHED Published: 2007-11-20T19:00:00 Last Updated: 2024-08-07T15:31:57.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service (loss of audio) or intercept voice communications via a crafted TFTP request containing the phone's MAC address in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/338
e filename. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3387 - http://secunia.com/advisories/27710 - http://www.csnc.ch/static/advisory/csnc/alcatel_omnipcx_enterprise_audio_rerouting_vulnerability_v1.0.txt - http://www.securityfocus.com/bid/26494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38560 - http://www1.alcatel-lucent.com/psirt/statements/2007004/IPTouchDOS.pdf - http://www.securityfocus.com/archive/1/483925/100/0/threaded - http://www.vupen.com/english/advisories/2007/3919 - http://osvdb.org/40522 - http://www.securitytracker.com/id?1018983
CVE ID: CVE-2007-5362 State: PUBLISHED Published: 2007-10-11T01:00:00 Last Updated: 2024-08-07T15:31:57.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) credits.html.php, (2) info.html.php, (3) media.divs.php, (4) media.divs.js.php, (5) purchase.html.php, or (6) support.html.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: vector 3 may
venance of this information is unknown; the details are obtained solely from third party information. NOTE: vector 3 may be the same as CVE-2007-2043.2. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38588 - http://osvdb.org/38587 - http://osvdb.org/38586 - http://www.securityfocus.com/bid/25960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37015
CVE ID: CVE-2007-5363 State: PUBLISHED Published: 2007-10-11T01:00:00 Last Updated: 2024-08-07T15:31:57.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36992 - http://www.vupen.com/english/advisories/2007/3
eferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36992 - http://www.vupen.com/english/advisories/2007/3428 - http://osvdb.org/38585 - http://www.securityfocus.com/bid/25946
CVE ID: CVE-2007-5364 State: PUBLISHED Published: 2007-10-11T01:00:00 Last Updated: 2024-08-07T15:31:57.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3212 - http://www.se
ional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3212 - http://www.securityfocus.com/archive/1/481658/100/0/threaded - http://www.securityfocus.com/bid/25998 - http://www.securityfocus.com/archive/1/481848
CVE ID: CVE-2007-5365 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27338 - http://secunia.com/advisories/27350 - http://www.vupen.com/english/advisories/2008/3
tp://secunia.com/advisories/27338 - http://secunia.com/advisories/27350 - http://www.vupen.com/english/advisories/2008/3088 - https://www.exploit-db.com/exploits/4601 - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/dhcpd/options.c - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446354 - http://www.openbsd.org/errata42.html#001_dhcpd - http://www.securityfocus.com/bid/25984 - http://www.securityfocus.com/archive/1/483230/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37045 - http://www.redhat.com/support/errata/RHSA-2007-0970.html - http://www.debian.org/security/2007/dsa-1388 - http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1962 - htt
w.debian.org/security/2007/dsa-1388 - http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1962 - http://www.ubuntu.com/usn/usn-531-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5817 - http://www.ubuntu.com/usn/usn-531-2 - http://secunia.com/advisories/27160 - http://www.securityfocus.com/archive/1/482085/100/100/threaded - http://secunia.com/advisories/27273 - http://www.openbsd.org/errata40.html#016_dhcpd - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243806-1 - http://secunia.com/advisories/32668 - http://www.openbsd.org/errata41.html#010_dhcpd - http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1
- http://www.openbsd.org/errata41.html#010_dhcpd - http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1 - http://www.securitytracker.com/id?1018794 - http://securitytracker.com/id?1021157 - http://www.securityfocus.com/bid/32213
CVE ID: CVE-2007-5366 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37026 - http://osvdb.o
ces: - http://secunia.com/advisories/27136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37026 - http://osvdb.org/41318 - http://www.securityfocus.com/bid/25988 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200705e.html
CVE ID: CVE-2007-5367 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:58.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37720 - http://www.vupen.com/english/advisories/2007/3444 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1933 - http://www.securitytracker.com/id?1018796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37042 - http://secuni
- http://www.securitytracker.com/id?1018796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37042 - http://secunia.com/advisories/27154 - http://www.securityfocus.com/bid/25992 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103088-1
CVE ID: CVE-2007-5368 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37043 - http://www.securityfocus.com/bid/25993 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1892 - http://secunia.com/advisories/27152 - http://www.vupen.com/
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1892 - http://secunia.com/advisories/27152 - http://www.vupen.com/english/advisories/2007/3445 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103109-1 - http://www.securitytracker.com/id?1018795
CVE ID: CVE-2007-5369 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a string to the VoIP port (52999/tcp) with an invalid value in the third byte. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37034 - http://www.securityfocus.com/bid/25985 - http://www.securityfocus.com/archive/1/481895/100/0/threaded - http://www.massive.se/Index.asp?nNe
focus.com/bid/25985 - http://www.securityfocus.com/archive/1/481895/100/0/threaded - http://www.massive.se/Index.asp?nNewsId=1387 - http://secunia.com/advisories/27157 - http://www.vupen.com/english/advisories/2007/3448 - http://securityreason.com/securityalert/3214
CVE ID: CVE-2007-5370 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attackers to inject arbitrary web script or HTML via the (1) group or (2) utag parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37031 - http://www.securityfocus.com/archive/1/481865/100/0/threaded - http://secunia.com/advisories/27163 - http://www.vupen.com/english/advisories/2007/3452 - http://osvdb.org/37651 - http:
http://secunia.com/advisories/27163 - http://www.vupen.com/english/advisories/2007/3452 - http://osvdb.org/37651 - http://securityreason.com/securityalert/3208 - http://www.securityfocus.com/bid/25981
CVE ID: CVE-2007-5371 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the (1) documentDirty or (2) modVariables parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3215 - http://www.securityfocus.com/archive/1/481870/100/0/threaded - http://osvdb.org/38584
CVE ID: CVE-2007-5372 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37032 - http://www.securityfocus.com/archive/1/481866/100/0/threaded - http://osvdb.org/37865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
us.com/archive/1/481866/100/0/threaded - http://osvdb.org/37865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37033 - http://www.vupen.com/english/advisories/2007/3453 - http://securityreason.com/securityalert/3209 - http://www.securityfocus.com/bid/25979 - http://osvdb.org/37866 - http://www.ledgersmb.org/node/54 - http://secunia.com/advisories/27171
CVE ID: CVE-2007-5373 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the _changepassword function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1517 - http://secunia.com/advisories/27111 - http://www.securityfocus.com/bid/25982 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445582 - http://secunia.c
11 - http://www.securityfocus.com/bid/25982 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445582 - http://secunia.com/advisories/29395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37029
CVE ID: CVE-2007-5374 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37050 - http://www.securityfocus.com/bid/25990 - https://www.exploit-db.com/exploits/4505 - http://secunia.com/advisories/27164
CVE ID: CVE-2007-5375 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:31:57.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in an intranet context, when an intranet web server has an HTML document that references a "mayscript=true" Java applet through a local relative URI, which may be associated with different IP addresses by the browser and the JVM. Additional Analyst Notes: - CVE Program Container: References: - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://os
ional Analyst Notes: - CVE Program Container: References: - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://osvdb.org/40930
CVE ID: CVE-2007-5377 State: PUBLISHED Published: 2007-10-12T00:00:00 Last Updated: 2024-08-07T15:31:58.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/emacs-devel/2007-10/msg00158.html - http://secunia.com/advisories/27244 - http://bugs.gentoo.org/show_bug.cgi?id=194713 - http://secunia.com/advisories/27343 - http://lists.gnu.org/archive/html/em
tp://bugs.gentoo.org/show_bug.cgi?id=194713 - http://secunia.com/advisories/27343 - http://lists.gnu.org/archive/html/emacs-devel/2007-10/msg00132.html - http://www.gentoo.org/security/en/glsa/glsa-200710-22.xml - http://osvdb.org/41752 - http://www.securityfocus.com/bid/26072
CVE ID: CVE-2007-5378 State: PUBLISHED Published: 2007-10-12T01:00:00 Last Updated: 2024-08-07T15:31:58.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30129 - http://www.redhat.com/support/errata/RHSA-20
CVE Program Container: References: - http://secunia.com/advisories/30129 - http://www.redhat.com/support/errata/RHSA-2008-0134.html - http://www.vupen.com/english/advisories/2008/1744 - http://secunia.com/advisories/34297 - http://www.vupen.com/english/advisories/2008/1456/references - http://www.securityfocus.com/bid/26056 - http://secunia.com/advisories/27806 - http://secunia.com/advisories/27801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37189 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9480 - https://sourceforge.net/tracker/?func=detail&atid=112997&aid=1458234&group_i