Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secunia.com/advisories/21078 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9175 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.osvdb.org/27362 - http://www.osvdb.org/27364 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - http
//www.osvdb.org/27362 - http://www.osvdb.org/27364 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - http://www.osvdb.org/27363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27822 - http://www.vupen.com/english/advisories/2006/2850 - http://www.osvdb.org/27369 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27828 - http://www.debian.org/security/2006/dsa-1127 - http://secunia.com/advisories/21107 - http://secunia.com/advisories/21249 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - https://exchange.xforce.i
KSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27824 - http://www.securityfocus.com/bid/19051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27823
CVE ID: CVE-2006-3629 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:52.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://se
ity/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secunia.com/advisories/21078 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.osvdb.org/27365 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - http://www.vupen.com/english/advisories/2006/2850 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10492 - http://www.wireshark.org/security/wnpa-sec-2
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10492 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - http://www.debian.org/security/2006/dsa-1127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27826 - http://secunia.com/advisories/21107 - http://secunia.com/advisories/21249 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - http://www.securityfocus.com/bid/19051
CVE ID: CVE-2006-3630 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11350 - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/ad
3Aorg.mitre.oval%3Adef%3A11350 - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secunia.com/advisories/21078 - http://www.osvdb.org/27368 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27827 - http://www.osvdb.org/27367 - http://www.osvdb.org/27366 - http:/
://exchange.xforce.ibmcloud.com/vulnerabilities/27827 - http://www.osvdb.org/27367 - http://www.osvdb.org/27366 - http://www.vupen.com/english/advisories/2006/2850 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - http://www.debian.org/security/2006/dsa-1127 - http://secunia.com/advisories/21107 - http://secunia.com/advisories/21249 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - http://www.securityfocus.com/bid/19051
CVE ID: CVE-2006-3631 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secun
/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secunia.com/advisories/21078 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27829 - http://www.vupen.com/english/advisories/2006/2850 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - http://www.osvdb.org/27370 - http://www.debian.org/s
06/2850 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - http://www.osvdb.org/27370 - http://www.debian.org/security/2006/dsa-1127 - http://secunia.com/advisories/21107 - http://secunia.com/advisories/21249 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11476 - http://www.securityfocus.com/bid/19051
CVE ID: CVE-2006-3632 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:52.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://www.osvdb.org/27371 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
_20_sr.html - http://www.osvdb.org/27371 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27830 - http://secunia.com/advisories/21121 - http://securitytracker.com/id?1016532 - http://secunia.com/advisories/21078 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - http://www.vupen.com/english/advisories/2006/2850 - htt
- http://www.securityfocus.com/archive/1/440576/100/0/threaded - http://www.vupen.com/english/advisories/2006/2850 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - http://www.debian.org/security/2006/dsa-1127 - http://secunia.com/advisories/21107 - http://secunia.com/advisories/21249 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - http://www.securityfocus.com/bid/19051
CVE ID: CVE-2006-3633 State: PUBLISHED Published: 2006-07-27T01:00:00 Last Updated: 2024-08-07T18:39:53.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2986 - http://www.securityfocus.com/bid/19199 - http://secunia.com/advisories/21209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27978 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html - http://www.sourcefire.com/se
lities/27978 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html - http://www.sourcefire.com/services/advisories/sa072506.html
CVE ID: CVE-2006-3634 State: PUBLISHED Published: 2006-08-04T23:00:00 Last Updated: 2024-08-07T18:39:54.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bafe00cc9297ca77b66e5c83e5e65e17c0c997c8 - http://security-tracker.debian.org/tracker/CVE-2006-3634
CVE ID: CVE-2006-3635 State: PUBLISHED Published: 2017-08-07T03:00:00 Last Updated: 2024-08-07T18:39:53.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.26 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4dcc29e1574d88f4465ba865ed82800032f76418 - https://bugzilla.suse.com/show_bug.cgi?id=199440
orvalds/linux.git/commit/?id=4dcc29e1574d88f4465ba865ed82800032f76418 - https://bugzilla.suse.com/show_bug.cgi?id=199440 - https://github.com/torvalds/linux/commit/4dcc29e1574d88f4465ba865ed82800032f76418
CVE ID: CVE-2006-3636 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T18:39:53.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3446 - http://www.debian.org/security/2006/dsa-1188 - http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html - http://www.securityfocus.com/bid/19831 - http://secunia.com/advisories/22639 - http://securitytracker.com/id?1016808 - http
p://www.securityfocus.com/bid/19831 - http://secunia.com/advisories/22639 - http://securitytracker.com/id?1016808 - http://secunia.com/advisories/21879 - http://www.securityfocus.com/bid/20021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553 - http://www.ubuntu.com/usn/usn-345-1 - http://security.gentoo.org/glsa/glsa-200609-12.xml - http://www.securityfocus.com/archive/1/445992/100/0/threaded - http://secunia.com/advisories/22227 - http://www.novell.com/linux/security/advisories/2006_25_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:165 - http://secunia.com/advisories/21792 - http://rhn.redhat.com/errata/RHSA-2006-0600.html
/advisories?name=MDKSA-2006:165 - http://secunia.com/advisories/21792 - http://rhn.redhat.com/errata/RHSA-2006-0600.html - http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295 - http://secunia.com/advisories/21732 - http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt - http://secunia.com/advisories/22011 - http://secunia.com/advisories/22020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28731
CVE ID: CVE-2006-3637 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:39:53.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27853 - http://securitytracker.com/id?1016663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://secunia.com/ad
m/id?1016663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://secunia.com/advisories/21396 - http://www.vupen.com/english/advisories/2006/3212 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.kb.cert.org/vuls/id/340060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A502
CVE ID: CVE-2006-3638 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:39:53.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/959049 - http://securitytracker.com/id?1016663 - https://docs.microsoft.com/en-us
nces: - http://www.kb.cert.org/vuls/id/959049 - http://securitytracker.com/id?1016663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://www.osvdb.org/27852 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A719 - http://www.securityfocus.com/archive/1/442728/100/0/threaded - http://secunia.com/advisories/21396 - http://www.vupen.com/english/advisories/2006/3212 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.tippingpoint.com/security/advisories/TSRT-06-09.html - http://www.securityfocus.com/bid/19340
CVE ID: CVE-2006-3639 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:39:53.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://secunia.com/advisories/2139
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://secunia.com/advisories/21396 - http://www.osvdb.org/27851 - http://www.vupen.com/english/advisories/2006/3212 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.kb.cert.org/vuls/id/252764 - http://www.securityfocus.com/bid/19400 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A577
CVE ID: CVE-2006-3640 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:39:54.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited web pages in other domains or zones, aka "Window Location Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
security-updates/securitybulletins/2006/ms06-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A171 - http://www.securityfocus.com/bid/19339 - http://secunia.com/advisories/21396 - http://www.vupen.com/english/advisories/2006/3212 - http://www.osvdb.org/27850
CVE ID: CVE-2006-3641 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3642 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3643 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:39:53.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28005 - http://www.vupen.com/english/ad
itytracker.com/id?1016655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28005 - http://www.vupen.com/english/advisories/2006/3213 - http://www.securityfocus.com/bid/19417 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A638 - http://www.kb.cert.org/vuls/id/927548 - http://secunia.com/advisories/21401 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-044
CVE ID: CVE-2006-3644 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3645 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3646 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3647 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:39:54.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20341 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4 - http:/
yfocus.com/bid/20341 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4 - http://securitytracker.com/id?1017032 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3979 - http://www.securityfocus.com/archive/1/448417/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.osvdb.org/29440 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0211.html
CVE ID: CVE-2006-3648 State: PUBLISHED Published: 2006-08-09T01:00:00 Last Updated: 2024-08-07T18:39:53.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841 - http://w
ns/2006/ms06-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841 - http://www.vupen.com/english/advisories/2006/3216 - http://www.kb.cert.org/vuls/id/411516 - http://www.securityfocus.com/bid/19384 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://securitytracker.com/id?1016661
CVE ID: CVE-2006-3649 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:39:53.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybull
nal Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-047 - http://www.kb.cert.org/vuls/id/159484 - http://secunia.com/advisories/21408 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.vupen.com/english/advisories/2006/3214 - http://www.securityfocus.com/bid/19414 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A694 - http://securitytracker.com/id?1016656
CVE ID: CVE-2006-3650 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:39:53.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20383 - http://www.securityfocus.