Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5718 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-11.xml - http://secunia.com/advisories/29259 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448319 - http://www.securityfocus.com/bid/26233 - http://osvdb.org/41997 - http://secunia.com/advisories/27420 - https://exchan
- http://www.securityfocus.com/bid/26233 - http://osvdb.org/41997 - http://secunia.com/advisories/27420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38172
CVE ID: CVE-2007-5719 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38152 - https://www.exploit-db.com/exploits/4587 - http://www.minibb.net/forums/9_4888_0.html - http://www.securityfocus.com/bid/26249
CVE ID: CVE-2007-5720 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45297 - http://www.securityfocus.com/bid/26242 - https://www.exploit-db.com/exploits/4586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38185
CVE ID: CVE-2007-5721 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26240 - http://osvdb.org/38838 - https://www.exploit-db.com/exploits/4585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38167
CVE ID: CVE-2007-5722 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the GLCHAT.GLChatCtrl.1 control, as originally exploited in the wild in October 2007. NOTE: some of these details are obtained from third party information. NOTE: this was originally reported as a heap-based issue by some sources. Additional A
ned from third party information. NOTE: this was originally reported as a heap-based issue by some sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38222 - http://www.securityfocus.com/bid/26244 - http://osvdb.org/38837 - http://secunia.com/advisories/27500
CVE ID: CVE-2007-5723 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27442 - http://www.securityfocus.com/bid/26251 - http://www.nufw.org/+NuFW-2-2-7%2C207+.html - http://osvdb.org/39724 - https://exchange.xforce.ibmcloud.com/vuln
26251 - http://www.nufw.org/+NuFW-2-2-7%2C207+.html - http://osvdb.org/39724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38153
CVE ID: CVE-2007-5724 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38145 - http://www.securityfocus.com/archive/1/482928/100/0/threaded - http://osvdb.org/38300 - http://securityreason.com/securityalert/3316 - http://www.securityfocus.com/bid/262
/threaded - http://osvdb.org/38300 - http://securityreason.com/securityalert/3316 - http://www.securityfocus.com/bid/26234 - http://secunia.com/advisories/27449
CVE ID: CVE-2007-5725 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php; or the command parameter to index.php in (2) the default action for the home page, (3) a currencies action, or (4) a basket action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38144 - http://www.securityfocus.com/archive/1/482906/100/0/threaded - http://www.securityfocus.com/bid/26232 -
ilities/38144 - http://www.securityfocus.com/archive/1/482906/100/0/threaded - http://www.securityfocus.com/bid/26232 - http://securityreason.com/securityalert/3312
CVE ID: CVE-2007-5726 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote attackers to cause a denial of service (panic) via unspecified vectors related to "INIT processing." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201252-1 - http://secunia.com/advisories/27428 - http://www.vupen.com/english/advisories/2007/3633 - https://exchange.xforce.ibmclo
http://secunia.com/advisories/27428 - http://www.vupen.com/english/advisories/2007/3633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38126 - http://www.securitytracker.com/id?1018867 - http://www.securityfocus.com/bid/26224 - http://osvdb.org/40815 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103101-1
CVE ID: CVE-2007-5727 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in the description parameter to (1) tcreate.php or (2) tupdate.php, as demonstrated using an onmouseover event in a b tag. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38836 - http://www.securityfocus
tag. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38836 - http://www.securityfocus.com/archive/1/482790/100/0/threaded - http://secunia.com/advisories/27415 - http://securityreason.com/securityalert/3320 - http://www.securityfocus.com/bid/26208 - http://osvdb.org/38215 - http://www.securityfocus.com/bid/26217
CVE ID: CVE-2007-5728 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE-2007-2865. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27756 - http://osvdb.org/36699 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063617.html - http://secunia.com/advisories/25446 - http:/
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063617.html - http://secunia.com/advisories/25446 - http://www.securityfocus.com/bid/24182 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/33263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34550 - http://www.debian.org/security/2008/dsa-1693
CVE ID: CVE-2007-5729 State: PUBLISHED Published: 2007-10-30T22:00:00 Last Updated: 2024-08-07T15:39:13.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.s
tifier for the mtu overflow vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - http://osvdb.org/42986 - http://www.debian.org/security/2007/dsa-1284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38238 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/27486 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://www.vupen.com/english/advisories/2007/1597 - h
unce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://www.vupen.com/english/advisories/2007/1597 - http://secunia.com/advisories/29129 - http://secunia.com/advisories/25095 - http://www.attrition.org/pipermail/vim/2007-October/001842.html
CVE ID: CVE-2007-5730 State: PUBLISHED Published: 2007-10-30T22:00:00 Last Updated: 2024-08-07T15:39:13.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731
n vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - http://www.redhat.com/support/errata/RHSA-2008-0194.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38239 - http://osvdb.org/42985 - http://www.debian.org/security/2007/dsa-1284 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/27486 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10000 - http://secunia.com/advisories/29963 - ht
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10000 - http://secunia.com/advisories/29963 - http://www.vupen.com/english/advisories/2007/1597 - http://secunia.com/advisories/29129 - http://secunia.com/advisories/25095 - http://www.attrition.org/pipermail/vim/2007-October/001842.html
CVE ID: CVE-2007-5731 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3699 - http://svn.apache.org/viewvc/jakarta/slide/trunk/src/webdav/server/org/apache/slide/webdav/method/LockMethod.java?view=log&sortby=date&pathrev=590976 - http://osvdb.org/38673
ebdav/server/org/apache/slide/webdav/method/LockMethod.java?view=log&sortby=date&pathrev=590976 - http://osvdb.org/38673 - https://www.exploit-db.com/exploits/4567 - http://secunia.com/advisories/27467
CVE ID: CVE-2007-5732 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39011 - http://elouai.com/force-download.php - http://securityreas
CVE Program Container: References: - http://osvdb.org/39011 - http://elouai.com/force-download.php - http://securityreason.com/securityalert/3321 - http://www.securityfocus.com/archive/1/482679/100/0/threaded
CVE ID: CVE-2007-5733 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39015 - http://securityreason.com/securityalert/3322 - http://www.securityfocus.com/archive/1/482676/100/0/thr
osvdb.org/39015 - http://securityreason.com/securityalert/3322 - http://www.securityfocus.com/archive/1/482676/100/0/threaded - http://www.securityfocus.com/bid/26179
CVE ID: CVE-2007-5734 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39013 - http://www.securityfocus.com/archive/1/482683/100/0/threaded - http://www.securityfocus.com/bid/26184 - http://securityreason.com/securityalert/3323
CVE ID: CVE-2007-5735 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482683/100/0/threaded - http://www.securityfocus.com/bid/26184 - http://osvdb.org/39012 - http://securityreason.com/securityalert/3323
CVE ID: CVE-2007-5736 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38922 - http://securityreason.com/securityalert/3324 - http://www.securityfocus.com/archive/1/482674/100/0/threaded
CVE ID: CVE-2007-5737 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26182 - http://securityreason.com/securityalert/3325 - http://www.securityfocus.com/archive/1/482687/100/0/threaded - http://osvdb.org/38921
CVE ID: CVE-2007-5738 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26182 - http://securityreason.com/securityalert/3325 - http://www.securityfocus.com/archive/1/482687/100/0/threaded - http://osvdb.org/38920
CVE ID: CVE-2007-5739 State: PUBLISHED Published: 2007-10-30T23:00:00 Last Updated: 2024-08-07T15:39:13.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26182 - http://osvdb.org/38919 - http://securityreason.com/securityalert/3325 - http://www.securityfocus.com/archive/1/482687/100/0/threaded
CVE ID: CVE-2007-5740 State: PUBLISHED Published: 2007-10-31T16:00:00 Last Updated: 2024-08-07T15:39:13.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27520 - http://www.securitytracker.com/id?1018883 - http://www.vergenet.net/linux/perdition/ChangeLog.shtml - http://www.sec-consult.com/300.html - http://archives.neohapsis.co
://www.vergenet.net/linux/perdition/ChangeLog.shtml - http://www.sec-consult.com/300.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html - http://www.debian.org/security/2007/dsa-1398 - http://secunia.com/advisories/27458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38184 - http://www.vupen.com/english/advisories/2007/3677 - http://www.securityfocus.com/archive/1/483034/100/0/threaded - http://www.securityfocus.com/bid/26270
CVE ID: CVE-2007-5741 State: PUBLISHED Published: 2007-11-07T21:00:00 Last Updated: 2024-08-07T15:39:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38288 - http://osvdb.org/42071 - http://www.securityfocus.com/bid/26354 - http://secunia.com/advisories/27559 - http://secunia.com/advisories/27530 - http://www.securityf
tyfocus.com/bid/26354 - http://secunia.com/advisories/27559 - http://secunia.com/advisories/27530 - http://www.securityfocus.com/archive/1/483343/100/0/threaded - http://www.debian.org/security/2007/dsa-1405 - http://www.vupen.com/english/advisories/2007/3754 - http://plone.org/about/security/advisories/cve-2007-5741 - http://osvdb.org/42072
CVE ID: CVE-2007-5742 State: PUBLISHED Published: 2007-12-01T02:00:00 Last Updated: 2024-08-07T15:39:13.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41713 - http://secunia.com/advisories/27920 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00006.html - http://sourceforge.net/project/shownotes.php?release_id=557098 - http://secunia.com/advisories/27943 - http:/
006.html - http://sourceforge.net/project/shownotes.php?release_id=557098 - http://secunia.com/advisories/27943 - http://secunia.com/advisories/27786 - http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00004.html - http://www.vupen.com/english/advisories/2007/4026 - http://www.wesnoth.org/forum/viewtopic.php?t=18844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38752 - http://www.securityfocus.com/bid/26626 - http://www.debian.org/security/2007/dsa-1421
CVE ID: CVE-2007-5743 State: PUBLISHED Published: 2019-11-07T21:55:32 Last Updated: 2024-08-07T15:39:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2007-5743 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696
CVE ID: CVE-2007-5745 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T15:39:13.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29913 - http://www.redhat.com/support/errata/RHSA-2008-0175.html - http://secunia.com/advisories/29852 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 - http://www.