Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5514 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T10:56:47.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.washington.edu/imap/documentation/RELNOTES.html - http://secunia.com/advisories/33275 - http://www.securityfocus.com/bid
washington.edu/imap/documentation/RELNOTES.html - http://secunia.com/advisories/33275 - http://www.securityfocus.com/bid/32958 - http://secunia.com/advisories/33638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47526 - http://securitytracker.com/id?1021485 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00846.html - https://bugzilla.redhat.com/show_bug.cgi?id=477227 - http://www.vupen.com/english/advisories/2008/3490 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:146
CVE ID: CVE-2008-5515 State: PUBLISHED Published: 2009-06-16T20:26:00 Last Updated: 2024-08-07T10:56:46.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://marc.info/?l=bugtraq&m=12
otes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://secunia.com/advisories/39317 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:138 - http://www.vupen.com/english/advisories/2009/1535 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html - http://www.debian.org/security/2011/dsa-2207 - http://jvn.jp/en/jp/JVN63832775/index.html - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://secunia.com/advisories/37460 - http://www.vupen.com/english/advisories/2010/3056 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/a
.com/english/advisories/2010/3056 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/35788 - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://www.securityfocus.com/archive/1/504202/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.securityfocus.com/bid/35263 - http://www.vupen.com/english/advisories/2009/1520 - http://secunia.com/advisories/44183 - http://www.vupen.com/english/advisories/2009/1856 - http://www.securityfocus.com/archive/1/504170/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://www.securityfocus.com/archive/1/507985/100/0/threade
//www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/42368 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/35393 - http://support.apple.com/kb/HT4077 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445 - http://secunia.com/advisories/35685 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html - http://tomcat.apache.org/security-5.htm
://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html - http://tomcat.apache.org/security-5.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1 - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422 - https://oval.cisecuri
2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452 - http://www.vupen.com/english/advisories/2009/3316 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c
db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-5516 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T10:56:46.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1708 - https://bugzilla.redhat.com/show_bug.cgi?id=479715 - http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml - http://wiki.rpath.com/Advisories:rPSA-2009-0005 - http://www.vupen.com/english/advisories/2009/0175 - http://repo.or.cz/w/git.git?a=commitdiff%3Bh=c582a
:rPSA-2009-0005 - http://www.vupen.com/english/advisories/2009/0175 - http://repo.or.cz/w/git.git?a=commitdiff%3Bh=c582abae - http://securityreason.com/securityalert/4919 - http://secunia.com/advisories/34194 - http://secunia.com/advisories/33964 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html - http://www.openwall.com/lists/oss-security/2009/01/23/2 - http://www.securityfocus.com/archive/1/500008/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330 - http://www.openwall.com/lists/oss-security/2009/01/20/1 - http://www.openwall.com/lists/oss-security/2009/01/21/7 - https://issues.rpath.com/browse/RPL-2936 - http://www.ubuntu.com/usn/USN-723-1
CVE ID: CVE-2008-5517 State: PUBLISHED Published: 2009-01-13T16:00:00 Last Updated: 2024-08-07T10:56:46.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1708 - https://bugzilla.redhat.com/show_bug.cgi?id=479715 - http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml - http://wiki.rpath.com/Advisories:rPSA-2009-0005 - http://www.vupen.com/english/advisories/2009/0175 - http://secunia.com/adviso
wiki.rpath.com/Advisories:rPSA-2009-0005 - http://www.vupen.com/english/advisories/2009/0175 - http://secunia.com/advisories/34194 - http://secunia.com/advisories/33964 - http://repo.or.cz/w/git.git?a=commitdiff%3Bh=516381d5 - http://www.securityfocus.com/bid/33215 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html - http://www.openwall.com/lists/oss-security/2009/01/23/2 - http://www.securityfocus.com/archive/1/500008/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330 - http://www.openwall.com/lists/oss-security/2009/01/20/1 - http://www.openwall.com/lists/oss-security/2009/01/21/7 - https://issues.rpath.com/browse/RPL-2936 - http://www.ubuntu
- http://www.openwall.com/lists/oss-security/2009/01/21/7 - https://issues.rpath.com/browse/RPL-2936 - http://www.ubuntu.com/usn/USN-723-1
CVE ID: CVE-2008-5518 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T10:56:46.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter
rameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49899 - http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214 - http://www.vupen.com/english/advisories/2009/1089 - http://www.securityfocus.com/bid/34562 - http://issues.apache.org/jira/browse/GERONIMO-4597 - http://secunia.com/advisories/34715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49898 - https
GERONIMO-4597 - http://secunia.com/advisories/34715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49898 - https://www.exploit-db.com/exploits/8458 - http://www.securityfocus.com/archive/1/502733/100/0/threaded - http://dsecrg.com/pages/vul/show.php?id=118
CVE ID: CVE-2008-5519 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T10:56:46.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.c
s containing Content-Length headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0973 - http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html - http://secunia.com/advisories/34621 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://securitytracker.com/id?1022001 - http://www.securityfocus.com/bid/34412 - http://www.openwall.com/lists/oss-security/2009/04/08/10 - http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h - http://www.redhat.com/support/errata/RHSA-2009-0446.html - http://mail-archives.
2=702540&pathrev=702540&diff_format=h - http://www.redhat.com/support/errata/RHSA-2009-0446.html - http://mail-archives.apache.org/mod_mbox/www-announce/200904.mbox/%3C49DBBAC0.2080400%40apache.org%3E - http://svn.eu.apache.org/viewvc?view=rev&revision=702540 - http://marc.info/?l=tomcat-dev&m=123913700700879 - http://www.securityfocus.com/archive/1/502530/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=490201 - http://secunia.com/advisories/29283 - http://tomcat.apache.org/security-jk.html - http://secunia.com/advisories/35537 - http://www.debian.org/security/2009/dsa-1810 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262468-1 - http://svn.eu.apache.org/viewvc/tomc
2009/dsa-1810 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262468-1 - http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540 - https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache
E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-5520 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreas
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5521 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5522 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5523 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityaler
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5524 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/se
ogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5525 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securi
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5526 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityal
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5527 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 -
eferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5528 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/472
: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5529 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityal
CVE ID: CVE-2008-5530 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4