Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/advisories/29268 - http://secunia.com/advisories/29066 - http://secunia.com/advisories/29622 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://secunia.com/advisories/29209 - https://issues.rpath.com/browse/RPL-2284 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html - http://security.gentoo.org/glsa/glsa-200803-10.xml - http://www.securityfocus.com/archive/1/488926/100/0/threaded - http://www.debian.org/security/2008/dsa-1609 - http://secunia.com/advisories/29166 - http://wiki.rpath.com/Advisories:rPSA-2008-0084 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html - http://www.securityfocus.com/
-0084 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html - http://www.securityfocus.com/bid/27943 - http://secunia.com/advisories/31104 - http://trac.lighttpd.net/trac/ticket/1562
CVE ID: CVE-2008-0984 State: PUBLISHED Published: 2008-02-26T19:00:00 Last Updated: 2024-08-07T08:01:40.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29122 - http://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://secunia.com/advisories/29153 - http://www.videolan.org/security/sa0802.html - http://www.securityfocus.com/bid/28007 - http:/
ia.com/advisories/29153 - http://www.videolan.org/security/sa0802.html - http://www.securityfocus.com/bid/28007 - http://www.securitytracker.com/id?1019510 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html - http://www.securityfocus.com/archive/1/488841/100/0/threaded - http://secunia.com/advisories/29766 - http://www.vupen.com/english/advisories/2008/0682 - http://www.coresecurity.com/?action=item&id=2147 - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2008-0985 State: PUBLISHED Published: 2008-03-06T00:00:00 Last Updated: 2024-08-07T08:01:40.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40998 - http://www.coresecurity.com/?action=item&id=2148 - http://android-developers.blogspot.
cloud.com/vulnerabilities/40998 - http://www.coresecurity.com/?action=item&id=2148 - http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html - http://www.securityfocus.com/bid/28005 - http://www.securityfocus.com/archive/1/489135/100/0/threaded
CVE ID: CVE-2008-0986 State: PUBLISHED Published: 2008-03-06T00:00:00 Last Updated: 2024-08-07T08:01:40.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3727 - http://www.coresecurity.com/?action=item&id=2148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40999 - http://www.securityfocus.com/bid/28006 - http://andr
2148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40999 - http://www.securityfocus.com/bid/28006 - http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html - http://www.securityfocus.com/archive/1/489135/100/0/threaded
CVE ID: CVE-2008-0987 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.vupen.com/english/advisories/2008/0957/references - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/ref
eferences - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.securitytracker.com/id?1019683 - http://secunia.com/advisories/29469 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41294 - http://www.securitytracker.com/id?1019659 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html - http://www.securityfocus.com/bid/28363 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.securitytracker.com/id?1019684 - http://support.apple.com/kb/HT1232
CVE ID: CVE-2008-0988 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.securityfocus.com/bid/28374 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com
p://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securitytracker.com/id?1019661 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-0989 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://exchange.xforc
com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41292 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.securitytracker.com/id?1019662 - http://www.securityfocus.com/bid/28339
CVE ID: CVE-2008-0990 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28345 - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - h
http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://docs.info.apple.com/article.html?artnum=307562 - http://www.securitytracker.com/id?1019663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41289
CVE ID: CVE-2008-0992 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019673 - http://www.securityfocus.com/bid/28304 - http://www.securityfocus.com/bid/28365 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archive
vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://docs.info.apple.com/article.html?artnum=307562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41288
CVE ID: CVE-2008-0993 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.securityfocus.com/bid/28372 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/securi
- http://www.securityfocus.com/bid/28372 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securitytracker.com/id?1019664 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-0994 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.securityfocus.com/bid/28386 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/
yfocus.com/bid/28386 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://docs.info.apple.com/article.html?artnum=307562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41276 - http://www.securitytracker.com/id?1019665
CVE ID: CVE-2008-0995 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:01:40.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.securityfocus.com/bid/28387 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41287 - http://secunia.com/ad
ish/advisories/2008/0924/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41287 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securitytracker.com/id?1019667 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-0996 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:08:56.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.securityfocus.com/bid/28344 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/ar
/www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securitytracker.com/id?1019667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41284 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-0997 State: PUBLISHED Published: 2008-03-18T22:00:00 Last Updated: 2024-08-07T08:08:56.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted PostScript Printer Description (PPD) file that is not properly handled when querying a network printer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28364 - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english
://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41282 - http://www.securitytracker.com/id?1019648 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-0998 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:08:56.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to bypass authorization and execute arbitrary code via crafted distributed objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41281 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories
techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securityfocus.com/bid/28385 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.securitytracker.com/id?1019674
CVE ID: CVE-2008-0999 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:08:56.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28304 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.securitytracker.com/id?1019669 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/securit
ttp://www.securitytracker.com/id?1019669 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41280 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.securityfocus.com/bid/28389
CVE ID: CVE-2008-10001 State: PUBLISHED Published: 2022-03-28T20:45:49.000Z Last Updated: 2025-04-15T14:45:19.323Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Pro2col Products: Stingray FTS Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3809 - http://seclists.org/bugtraq/2008/Sep/0157.html
CVE ID: CVE-2008-10002 State: PUBLISHED Published: 2023-03-05T02:00:05.790Z Last Updated: 2024-08-07T12:03:36.475Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: cfire24 Products: ajaxlife Problem Types: CWE-79 Description: A vulnerability has been found in cfire24 ajaxlife up to 0.3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.3.3 is able to address this issue. The patch is identified as 9fb53b67312fe3f4336e01c1e3e1bedb4be0c1c8. It is recommended to upgrade the affected component. VDB-222286 is the identifier assigned to this vulnerability. Ad
c8. It is recommended to upgrade the affected component. VDB-222286 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.222286 - https://vuldb.com/?ctiid.222286 - https://github.com/cfire24/ajaxlife/commit/9fb53b67312fe3f4336e01c1e3e1bedb4be0c1c8 - https://github.com/cfire24/ajaxlife/releases/tag/0.3.3
CVE ID: CVE-2008-10003 State: PUBLISHED Published: 2023-03-05T02:00:06.874Z Last Updated: 2024-08-07T12:03:36.719Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: iGamingModules Products: flashgames Problem Types: CWE-89 Description: A vulnerability was found in iGamingModules flashgames 1.1.0. It has been classified as critical. Affected is an unknown function of the file game.php. The manipulation of the argument lid leads to sql injection. It is possible to launch the attack remotely. The name of the patch is 6e57683704885be32eea2ea614f80c9bb8f012c5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222288. Additional Analyst No
ecommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222288. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222288 - https://vuldb.com/?ctiid.222288 - https://github.com/iGamingModules/flashgames/commit/6e57683704885be32eea2ea614f80c9bb8f012c5
CVE ID: CVE-2008-10004 State: PUBLISHED Published: 2023-03-06T22:31:03.084Z Last Updated: 2024-08-07T12:03:36.664Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Email Registration Problem Types: CWE-89 Description: A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function email_registration_user of the file email_registration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated remotely. Upgrading to version 6.x-1.0 is able to address this issue. The patch is identified as 126c141b7db038c778a2dc931d38766aad8d1112. It is recommended to
is able to address this issue. The patch is identified as 126c141b7db038c778a2dc931d38766aad8d1112. It is recommended to upgrade the affected component. VDB-222334 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222334 - https://vuldb.com/?ctiid.222334 - https://github.com/drupalprojects/email_registration/commit/126c141b7db038c778a2dc931d38766aad8d1112 - https://github.com/drupalprojects/email_registration/releases/tag/6.x-1.0
CVE ID: CVE-2008-1000 State: PUBLISHED Published: 2008-03-18T23:00:00 Last Updated: 2024-08-07T08:08:56.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via ".." sequences in file attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41278 - http://www.securityfocus.com/archive/1/489786/100/0/threaded - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/adviso
chive/1/489786/100/0/threaded - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securityfocus.com/bid/28278 - http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2189 - http://docs.info.apple.com/article.html?artnum=307562
CVE ID: CVE-2008-1001 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41333 - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives
.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.vupen.com/english/advisories/2008/0920/references
CVE ID: CVE-2008-1002 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/766019 - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41335 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/b
lities/41335 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.vupen.com/english/advisories/2008/0920/references - http://www.securityfocus.com/bid/28328 - http://secunia.com/advisories/29393