Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ed - http://www.securityfocus.com/bid/25079 - http://secunia.com/advisories/27718 - http://www.bugtraq.ir/adv/t1lib.txt - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://secunia.com/advisories/28345 - http://secunia.com/advisories/27599 - http://www.ubuntu.com/usn/usn-515-1 - http://secunia.com/advisories/27439 - http://www.securitytracker.com/id?1018905 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://secunia.com/advisories/26981 - http://www.redhat.com/support/errata/RHSA-2007-1027.html - http://www.redhat.com/support/errata/RHSA-2007-1030.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://secunia.com/ad
ort/errata/RHSA-2007-1030.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://secunia.com/advisories/26992 - http://bugs.gentoo.org/show_bug.cgi?id=193437 - http://www.novell.com/linux/security/advisories/2007_23_sr.html - http://www.securityfocus.com/archive/1/487984/100/0/threaded
CVE ID: CVE-2007-4034 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018470 - http://secunia.com/advisories/26011 - http://www.vupen.com/
r: References: - http://www.securitytracker.com/id?1018470 - http://secunia.com/advisories/26011 - http://www.vupen.com/english/advisories/2007/2679 - http://www.securityfocus.com/bid/25086 - http://osvdb.org/37705 - http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html - http://www.kb.cert.org/vuls/id/120760
CVE ID: CVE-2007-4035 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; (2) NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain directory contents; and (3) certain other malformed NTFS filesystems, which allows remote attackers to prevent examination of corrupted records. NOTE: the vendor disputes the significance of these issues, because physical collection can
nation of corrupted records. NOTE: the vendor disputes the significance of these issues, because physical collection can be used instead, because the vendor believes that relevant attackers typically do not corrupt an MBR or a filesystem, and because detection of a loop is valuable on its own Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer - http://www.securityfocus.com/archive/1/474727/100/0/threaded - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://www.securityfocus.com/archive/1/474750/100/0/threaded - http://www.securi
s.com/archive/1/475335/100/0/threaded - http://www.securityfocus.com/archive/1/474750/100/0/threaded - http://www.securityfocus.com/bid/25100 - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4036 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; (2) a corrupted NTFS filesystem, which causes the application to report "memory allocation errors;" or (3) deeply nested directories, which trigger an application crash during an Expand All action. NOTE: the vendor disputes the significance of these vectors because the user can select fewer options, there is no operationa
the vendor disputes the significance of these vectors because the user can select fewer options, there is no operational impact, or the user can do less expansion Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer - http://www.securityfocus.com/archive/1/474727/100/0/threaded - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://www.securityfocus.com/archive/1/474750/100/0/threaded - http://www.securityfocus.com/bid/25100 - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4037 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:05.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http:/
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer - http://www.securityfocus.com/archive/1/474727/100/0/threaded - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://www.securityfocus.com/archive/1/474750/100/0/threaded - http://www.securityfocus.com/bid/25100 - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4038 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking Thunderbird.exe, a similar issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/
. Additional Analyst Notes: - CVE Program Container: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/ - http://www.securityfocus.com/archive/1/474686/100/0/threaded - http://www.securityfocus.com/archive/1/474624/100/0/threaded - http://seclists.org/fulldisclosure/2007/Jul/0557.html
CVE ID: CVE-2007-4039 State: PUBLISHED Published: 2007-07-27T22:00:00.000Z Last Updated: 2025-04-03T14:30:14.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/ - http://seclists.org/fulldisclosure/200
lnrichment: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/ - http://seclists.org/fulldisclosure/2007/Jul/0557.html
CVE ID: CVE-2007-4040 State: PUBLISHED Published: 2007-07-27T22:00:00.000Z Last Updated: 2025-04-03T14:27:23.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/ - http://s
ogram Container: - CISA ADP Vulnrichment: References: - http://larholm.com/2007/07/25/mozilla-protocol-abuse/ - http://seclists.org/fulldisclosure/2007/Jul/0557.html
CVE ID: CVE-2007-4041 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://xs-sniper.com/blog/2007/07/24/remote-command-execution-in-firefox-2005/ - http://www.securityfocus.com/bid/25053 - http://xs-sniper.com/blog/remote-command-exec-firefox-2005/
in-firefox-2005/ - http://www.securityfocus.com/bid/25053 - http://xs-sniper.com/blog/remote-command-exec-firefox-2005/ - https://bugzilla.mozilla.org/show_bug.cgi?id=389106 - https://bugzilla.mozilla.org/show_bug.cgi?id=389580 - http://www.kb.cert.org/vuls/id/783400
CVE ID: CVE-2007-4042 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://xs-sniper.com/blog/remote-command-exec-firefox-2005/ - http://osvdb.org/46832
CVE ID: CVE-2007-4043 State: PUBLISHED Published: 2007-07-27T22:00:00.000Z Last Updated: 2025-04-03T14:24:25.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oliverkarow.de/research/securityreporter.txt - http://marc.info/?l=bugtraq&m=118522960430476&w=2
CVE ID: CVE-2007-4044 State: REJECTED Published: 2007-07-27T22:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2007-4045 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27577 - http://secunia.com/advisories/28113 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - https://www.redhat.com/archives/fedora-p
ories/28113 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html - http://bugs.gentoo.org/show_bug.cgi?id=199195 - http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml - http://www.redhat.com/support/errata/RHSA-2007-1022.html - http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm - http://www.securityfocus.com/bid/26524 - http://secunia.com/advisories/27615 - https://bugzilla.redhat.com/show_bug.cgi?id=250161 - http://www.redhat.com/support/errata/RHSA-2007-1023.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:036 - https://oval.cisecurity.org/repository/search/d
html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9303
CVE ID: CVE-2007-4046 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37098 - http://www.vupen.com/english/advisories/2007/2616 - http://www.securityfocus.com/bid/24972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35493 - https://www.exploit-db.com/exploits/4201
CVE ID: CVE-2007-4047 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listcomment.php in admin/, which allows remote attackers to delete arbitrary comments, delete arbitrary blogs, and have other unspecified impact via a request with a valid id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42487 - http://securityreason.com/securityalert/2934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35494 - http://osvdb.org/42486 - http://ww
com/securityalert/2934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35494 - http://osvdb.org/42486 - http://www.securityfocus.com/bid/24966 - http://www.securityfocus.com/archive/1/474127/100/0/threaded - http://osvdb.org/42485
CVE ID: CVE-2007-4048 State: PUBLISHED Published: 2007-07-30T16:00:00 Last Updated: 2024-08-07T14:37:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474756/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=532143 - http://download.phpgroupware.org/ - http://www.securityfocus.com/bid/25090 - http://secunia.com/advisories/26473 - http://secunia.com/advisories/26248 - http://securit
securityfocus.com/bid/25090 - http://secunia.com/advisories/26473 - http://secunia.com/advisories/26248 - http://securityreason.com/securityalert/2952 - http://osvdb.org/36601
CVE ID: CVE-2007-4049 State: REJECTED Published: 2007-07-30T16:00:00 Last Updated: 2007-09-13T09:00:00 Description: No description available.
CVE ID: CVE-2007-4050 State: PUBLISHED Published: 2007-07-30T16:00:00 Last Updated: 2024-08-07T14:37:06.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows remote attackers to access system-level windows via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2691 - http://www.securityfocus.com/bid/25091 - http://sourceforge.net/forum/forum.php?forum_id=719716 - http://secunia.com/advisories/26247 - http://osvdb.org/38691 - http://sourceforge.net/tracker/index.php?func=detail&aid=1745703&group_id=176962&atid=
/26247 - http://osvdb.org/38691 - http://sourceforge.net/tracker/index.php?func=detail&aid=1745703&group_id=176962&atid=879332 - http://adempiere.com/wiki/index.php/Release_330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35697 - http://sourceforge.net/tracker/index.php?func=detail&aid=1745707&group_id=176962&atid=879334
CVE ID: CVE-2007-4051 State: PUBLISHED Published: 2007-07-30T16:00:00 Last Updated: 2024-08-07T14:37:06.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain privileges via a file with a long pathname. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35654 - http://www.securityfocus.com/bid/25102 - http://sourceforge.net/project/shownotes.php?group_id=199532&release_id=527964 - http://osvdb.org/38624 - http://sourceforge.net/project/showfiles.ph
t/shownotes.php?group_id=199532&release_id=527964 - http://osvdb.org/38624 - http://sourceforge.net/project/showfiles.php?group_id=199532&package_id=236738&release_id=527964 - http://secunia.com/advisories/26233
CVE ID: CVE-2007-4052 State: PUBLISHED Published: 2007-07-30T16:00:00 Last Updated: 2024-08-07T14:37:06.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37129 - http://downloads.securityfocus.com/vulnerabilities/exploits/25081.html - http://www.securityfocus.com/bid/25081
CVE ID: CVE-2007-4053 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to new_images.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26259 - http://www.vupen.com/english/advisories/2007/2692 - https://www.exploit-db.com/exploits/4242 - http://osvdb.org/36286 - http://www.securityfocus.com/bid/25119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35674
CVE ID: CVE-2007-4054 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37130 - http://www.securityfocus.com/bid/25128 - https://www.exploit-db.com/exploits/4241 - http://www.vupen.com/english/advisories/2007/2693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35679
CVE ID: CVE-2007-4055 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4239 - http://www.securityfocus.com/bid/25123 - http://www.vupen.com/english/advisories/2007/2694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35677 - http://osvdb.org/37268
CVE ID: CVE-2007-4056 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project (aka Maan Bsat Photo Collection), but that was incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35683 - http://www.attrition.org/pipermail/vim/2007-July/
ts/4238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35683 - http://www.attrition.org/pipermail/vim/2007-July/001728.html - http://www.securityfocus.com/bid/25135 - http://www.vupen.com/english/advisories/2007/2695
CVE ID: CVE-2007-4057 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with (1) .php.gif, (2) .php.jpg, or (3) .php.png. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35681 - http://osvdb.org/39023 - http://www.securityfocus.com/bid/25130
CVE ID: CVE-2007-4058 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35673 - https://www.exploit-db.com/exploits/4244 - http://www.securityfocus.com/bid/25118
CVE ID: CVE-2007-4059 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.vupen.com/english/advisories/2007/3229 - http://www.securityfocus.com/bid/25110 - https://www.exploit-db.com/exploits/4240 - ht
om/english/advisories/2007/3229 - http://www.securityfocus.com/bid/25110 - https://www.exploit-db.com/exploits/4240 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35675
CVE ID: CVE-2007-4060 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4243 - http://osvdb.org/46831 - http://www.securityfocus.com/bid/25120