Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r adding tabs with long tab captions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499830/100/0/threaded - http://www.vupen.com/english/advisories/2009/0037 - http://www.vupen.com/english/advisories/2009/0036 - http://secunia.com/secunia_research/2008-54/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/47770 - http://secunia.com/secunia_research/2008-53/ - http://www.securityfocus.com/bid/33148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47771 - http://secunia.com/advisories/32648 - http://secunia.com/secunia_research/2008-52/ - http://securitytracker.com/id?1021529 - http://secunia.com/advisories/32609 - http://sec
com/secunia_research/2008-52/ - http://securitytracker.com/id?1021529 - http://secunia.com/advisories/32609 - http://securityreason.com/securityalert/4879 - http://secunia.com/advisories/32672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47769
CVE ID: CVE-2008-4828 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T10:31:27.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) We
ic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-55/ - http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - http://www.vupen.com/english/advisories/2009/1235 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59513 - http://osvdb.org/54232 - http://www.securityfocus.com/archive/1/503182/100/0/threaded - http://secunia.com/advisories/32604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50327 - http://osvdb.org/54231
CVE ID: CVE-2008-4829 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:31:27.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion v" HTTP header, related to the http_parse_sc_header function; (2) a crafted pls playlist with a long entry, related to the http_get_pls function; or (3) a crafted m3u playlist with a long File entry, related to the http_get_m3u function. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49997 - http://secunia.com/advisories/32562 - http://www.vupen.com/en
gram Container: References: - http://www.osvdb.org/49997 - http://secunia.com/advisories/32562 - http://www.vupen.com/english/advisories/2008/3207 - http://secunia.com/advisories/33052 - http://www.securityfocus.com/archive/1/498486/100/0/threaded - http://www.debian.org/security/2008/dsa-1683 - http://secunia.com/secunia_research/2008-50/ - http://secunia.com/advisories/33061 - http://www.securityfocus.com/bid/32356 - http://securityreason.com/securityalert/4647
CVE ID: CVE-2008-4830 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T10:31:27.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-56/ - http://secunia.com/advisories/32869 - http://www.securityfocus.com/archive/1/502698/100/0/threaded - http://www.v
-56/ - http://secunia.com/advisories/32869 - http://www.securityfocus.com/archive/1/502698/100/0/threaded - http://www.vupen.com/english/advisories/2009/1043 - http://www.securityfocus.com/bid/34524 - http://www.securitytracker.com/id?1022062
CVE ID: CVE-2008-4831 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:27.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021145 - http://osvdb.org/49709 - http://www.adobe.com/support/security/bulletins/apsb08-21.html - http://www.vupen.com/english/advisories/2008/3032 - http://secunia.com/advisories/32567 - http://www.securityfocus.co
- http://www.vupen.com/english/advisories/2008/3032 - http://secunia.com/advisories/32567 - http://www.securityfocus.com/bid/32130
CVE ID: CVE-2008-4832 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:31:27.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32710 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ogram Container: References: - http://secunia.com/advisories/32710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46700 - https://issues.rpath.com/browse/RPL-2857 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318
CVE ID: CVE-2008-4833 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4834 State: PUBLISHED Published: 2009-01-14T22:00:00 Last Updated: 2024-08-07T10:31:28.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001 - http://www.vupen.com/english/advisories/2009/0116 - http:/
.com/en-us/security-updates/securitybulletins/2009/ms09-001 - http://www.vupen.com/english/advisories/2009/0116 - http://www.us-cert.gov/cas/techalerts/TA09-013A.html - http://www.securityfocus.com/archive/1/500012/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-09-001/ - http://www.securityfocus.com/bid/33121 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5863 - http://www.securitytracker.com/id?1021560
CVE ID: CVE-2008-4835 State: PUBLISHED Published: 2009-01-14T22:00:00 Last Updated: 2024-10-15T14:49:14.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-002/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001 - http://www.vupen.com/english/advisories/2009/0116 - http://www.us-cert.gov/cas/techalerts/TA09-013A.html - http://www.securityfocus.com/bid/33122 - http://www.securityfocus.com/archive/1/500013/100/0/threaded - http://www.securitytracker.com/id?1021560 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5248
CVE ID: CVE-2008-4836 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4837 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:31:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Microsoft Works 8 allow remote attackers to execute arbitrary code via a crafted Word document that contains a malformed table property, which triggers memory corruption, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsof
Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.zerodayinitiative.com/advisories/ZDI-08-086/ - http://www.zerodayinitiative.com/advisories/ZDI-08-086 - http://www.securityfocus.com/archive/1/499064/100/0/threaded - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5982
CVE ID: CVE-2008-4838 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4839 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4840 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4841 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:31:28.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Progra
with a 2008-crash.doc.rar example, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6560 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6050 - http://www.securityfocus.com/bid/32718 - http://secunia.com/advisories/32997 - http://www.vupen.com/english/advisories/2008/3390 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://www.securityfocus.com/bid/31399 - http://www.microsoft.com/technet/security/advisory/960906.mspx - http://milw0rm.com/sploits/2008-crash.doc.rar - http://securitytracker.com/id?1021376 - http://securityreason.com/securityal
://milw0rm.com/sploits/2008-crash.doc.rar - http://securitytracker.com/id?1021376 - http://securityreason.com/securityalert/4711 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010 - http://www.vupen.com/english/advisories/2009/1024
CVE ID: CVE-2008-4842 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4843 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4844 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:31:27.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008. Additional Analyst Notes: - CVE Program Container: References: - http://www.scanw.com/blog/archives/303 -
ecember 2008. Additional Analyst Notes: - CVE Program Container: References: - http://www.scanw.com/blog/archives/303 - http://www.securitytracker.com/id?1021381 - http://isc.sans.org/diary.html?storyid=5458 - https://www.exploit-db.com/exploits/7583 - http://www.us-cert.gov/cas/techalerts/TA08-352A.html - http://code.google.com/p/inception-h2hc/ - http://www.kb.cert.org/vuls/id/493881 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6007 - http://www.securityfocus.com/bid/32721 - https://www.exploit-db.com/exploits/7477 - http://marc.info/?l=bugtraq&m=123015308222620&w=2 - http://www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-
.info/?l=bugtraq&m=123015308222620&w=2 - http://www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-sundays - http://marc.info/?l=bugtraq&m=123015308222620&w=2 - http://www.vupen.com/english/advisories/2008/3391 - http://www.avertlabs.com/research/blog/index.php/2008/12/09/yet-another-unpatched-drive-by-exploit-found-on-the-web/ - https://www.exploit-db.com/exploits/7403 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - https://www.exploit-db.com/exploits/7410 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-078 - http://secunia.com/advisories/33089 - http://www.microsoft.com/technet/security/advisory/961051.mspx - http://blogs.msdn.c
tp://secunia.com/advisories/33089 - http://www.microsoft.com/technet/security/advisory/961051.mspx - http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx
CVE ID: CVE-2008-4845 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4846 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4847 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4848 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4849 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4850 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4851 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4852 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4853 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4854 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4855 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4856 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4857 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4858 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4859 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4860 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4861 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4862 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4863 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503632 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:038 - http://www.openwall.com/lists/oss-security/2008/10/27/1 - http://security.gentoo.org/glsa
visories?name=MDVSA-2009:038 - http://www.openwall.com/lists/oss-security/2008/10/27/1 - http://security.gentoo.org/glsa/glsa-201001-07.xml
CVE ID: CVE-2008-4864 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679. Additional Analyst Notes: - CVE Program Container: References: - http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/im
tp://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/imageop.c&p2=/python/trunk/Modules/imageop.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702 - http://secunia.com/advisories/33937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354 - http://scary.beasts.org/security/CESA-2008-008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46606 - http://secunia.com/advisories/37471 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009
sories/VMSA-2009-0016.html - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://svn.python.org/view?rev=66689&view=rev - http://www.securityfocus.com/bid/31976 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.securityfocus.com/bid/31932 - http://www.openwall.com/lists/oss-security/2008/10/27/2 - http://www.openwall.com/lists/oss-security/2008/10/29/3 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2008-4865 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:27.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_name=200901032
Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_name=200901032045.17604.jseward%40acm.org&forum_name=valgrind-announce - http://www.openwall.com/lists/oss-security/2008/10/28/5 - http://www.openwall.com/lists/oss-security/2008/10/27/4 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://www.openwall.com/lists/oss-security/2008/10/29/5 - http://www.openwall.com/lists/oss-security/2008/10/29/9 - http://security.gentoo.org/glsa/glsa-200902-03.xml
CVE ID: CVE-2008-4866 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAX_REORDER_DELAY. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46322 - http://secunia.com/advisories/34845 - http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016011.html - http://www.mandriva.com/securit
ries/34845 - http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:013 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:015 - http://www.securityfocus.com/bid/33308 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html - http://www.ubuntu.com/usn/USN-734-1 - http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016012.html - http://www.debian.org/security/2009/dsa-1782 - http://www.openwall.com/lists/oss-security/2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://secunia.com/advisories/34296
CVE ID: CVE-2008-4867 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCA_MAX_FRAME_SIZE value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46324 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:014 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:013 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:015
.mandriva.com/security/advisories?name=MDVSA-2009:013 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:015 - http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016352.html - http://www.securityfocus.com/bid/33308 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html - http://www.ubuntu.com/usn/USN-734-1 - http://www.openwall.com/lists/oss-security/2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://secunia.com/advisories/34296