Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4688 State: PUBLISHED Published: 2006-02-01T02:00:00Z Last Updated: 2024-09-16T23:10:33.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session. Additional Analyst Notes: - CVE Program Container: References: - http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
CVE ID: CVE-2005-4689 State: PUBLISHED Published: 2006-02-01T02:00:00Z Last Updated: 2024-09-16T17:42:47.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html - http://www.sixapart.com/movabletype/docs/3.2/h_changelog/3_2.html
CVE ID: CVE-2005-4690 State: PUBLISHED Published: 2006-02-01T02:00:00Z Last Updated: 2024-09-16T19:52:24.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction with CVE-2005-3102 to create or overwrite arbitrary files of all types. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html - http://www.securityfocus.com/bid/15302 - ht
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html - http://www.securityfocus.com/bid/15302 - http://secunia.com/advisories/16899
CVE ID: CVE-2005-4691 State: PUBLISHED Published: 2006-02-01T02:00:00Z Last Updated: 2024-09-16T23:06:39.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted manual page. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015132 - http://mail-index.netbsd.org/source-changes/2005/09/12/0043.html - http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html -
ex.netbsd.org/source-changes/2005/09/12/0043.html - http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html - http://www.securityfocus.com/bid/15263 - http://www.osvdb.org/20731 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-009.txt.asc
CVE ID: CVE-2005-4692 State: PUBLISHED Published: 2006-02-01T20:00:00Z Last Updated: 2024-09-16T20:06:18.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22123 - http://sourceforge.net/project/shownotes.php?group_id=113650&release_id=381543
CVE ID: CVE-2005-4693 State: PUBLISHED Published: 2006-02-01T20:00:00Z Last Updated: 2024-09-16T19:16:00.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127 - http://www.osvdb.org/21233 - http://secunia.com/advisories/17739
CVE ID: CVE-2005-4694 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19933 - http://www.vupen.com/english/advisories/2005/2060 - http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-above - http://www.securityfocus.com/bid/15083 - http://secunia.com/advisories/17158 - https://exchange.xforce.ib
.3-and-above - http://www.securityfocus.com/bid/15083 - http://secunia.com/advisories/17158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22730
CVE ID: CVE-2005-4695 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15087 - http://www.osvdb.org/19953 - http://www.symantec.com/avcenter/security/Content/2005.10.12d.html - http://www.vupen.com/english/advisories/2005/2076 - http://secunia.com/advisories/17170 - http://securitytracker.com/id?1015051
CVE ID: CVE-2005-4696 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/46 - http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html - http://www.soonerorlater.hu/index.khtml?article_id=62 - http://www.osvdb.org/19873
/archives/bugtraq/2005-10/0016.html - http://www.soonerorlater.hu/index.khtml?article_id=62 - http://www.osvdb.org/19873 - http://www.vupen.com/english/advisories/2005/1970 - http://www.securityfocus.com/bid/15008 - https://www.exploit-db.com/exploits/26323/ - http://secunia.com/advisories/17064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22524
CVE ID: CVE-2005-4697 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/46 - http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html - http://www.soonerorlater.hu/index.khtml?article_id=62 - http://www.osvdb.org/19873 - http://www.vupen.com/english/advisories/2005/1
soonerorlater.hu/index.khtml?article_id=62 - http://www.osvdb.org/19873 - http://www.vupen.com/english/advisories/2005/1970 - http://www.securityfocus.com/bid/15008 - http://secunia.com/advisories/17064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22524
CVE ID: CVE-2005-4698 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91) q_IP (IP) or (2) q_Host (HOST) parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22521 - http://www.osvdb.org/19870 - http://www.securityfocus.com/bid/15012 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html - http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff - http://expl
rchives/fulldisclosure/2005-10/0107.html - http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff - http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt - http://secunia.com/advisories/17078
CVE ID: CVE-2005-4699 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22522 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html - http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff - http://exploitlabs.com/files/advisories/EXPL-A-
html - http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff - http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt - http://secunia.com/advisories/17078 - http://www.osvdb.org/19871
CVE ID: CVE-2005-4700 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive information via an invalid q_Host parameter, which reveals the full pathname of the application in an fsockopen error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19872 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22523 - http://exploitlabs.com/files/advisories/EX
5-10/0107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22523 - http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt - http://secunia.com/advisories/17078
CVE ID: CVE-2005-4701 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015053 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101949-1 - http://www.vupen.com/english/advisories/2005/2075 - http://www.osvdb.org/19976
CVE ID: CVE-2005-4702 State: PUBLISHED Published: 2006-02-01T20:00:00Z Last Updated: 2024-09-16T17:53:36.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters. Finally, this could be a rediscovery of CVE-2004-1430. Additional Analyst Notes: - CVE Pro
ated to shell metacharacters. Finally, this could be a rediscovery of CVE-2004-1430. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15205
CVE ID: CVE-2005-4703 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.osvdb.org/20033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42914 - http://www.securityfocus.com/bid/28484 - http://osvdb.org/ref/20/20033
hange.xforce.ibmcloud.com/vulnerabilities/42914 - http://www.securityfocus.com/bid/28484 - http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2005-4704 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/140 - http://www.osvdb.org/20094
CVE ID: CVE-2005-4705 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an insecure connection, will use the insecure connection, which allows remote attackers to sniff the connection. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/141 - http://www.osvdb.org/20095
CVE ID: CVE-2005-4706 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:28.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the secpolicy_fs_common function. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101895-1 - http://www.securityfocus.com/bid/15090 - http://www.vupen.com/english/advisories/2005/2074 - http://securitytracker.com/id?1015052 - http://www.osvdb.org/19975
CVE ID: CVE-2005-4707 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T23:53:29.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.eyce.be/php_gen/NEWS - http://www.osvdb.org/20876 - http://www.vupen.com/english/advisories/2005/2450 - http://secunia.com/advisories/18715 - http://secunia.com/advisories/17560
CVE ID: CVE-2005-4708 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T23:53:28.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014162 - http://securitytracker.com/id?1014161 - http://securitytracker.com/id?1014165 - http://www.macromedia.com/devnet/security/security_
ritytracker.com/id?1014161 - http://securitytracker.com/id?1014165 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html - http://www.securityfocus.com/archive/1/423587/100/0/threaded - http://www.kb.cert.org/vuls/id/953860 - http://securitytracker.com/id?1014166 - http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - http://securitytracker.com/id?1014159 - http://www.osvdb.org/17248 - http://securitytracker.com/id?1014163 - http://securitytracker.com/id?1014164 - http://www.vupen.com/english/advisories/2005/0723 - http://secunia.com/advisories/15654 - http://securitytracker.com/id?1014158 - http://securitytracker.com/id?1014160 - http://www.securityfocus.com/bid/13925
CVE ID: CVE-2005-4709 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T23:53:28.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal and threadCredential values from a previous client's authentication after termination of a client session, which allows remote attackers to gain the roles of an arbitrary previous client who had the same JBoss server thread. Additional Analyst Notes: - CVE Program Container: References: - http://jira.jboss.com/jira/browse/EJBTHREE-384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/243
References: - http://jira.jboss.com/jira/browse/EJBTHREE-384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24384 - http://www.vupen.com/english/advisories/2006/0374
CVE ID: CVE-2005-4710 State: PUBLISHED Published: 2006-02-10T11:00:00 Last Updated: 2024-08-07T23:53:28.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "gain inappropriate access to another local user's computer," aka ID DL5549329. Additional Analyst Notes: - CVE Program Container: References: - http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232 - http://secunia.com/advisories/18682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24460 - http://www.securityfocus.com/bid/16472
CVE ID: CVE-2005-4711 State: PUBLISHED Published: 2006-02-10T11:00:00 Last Updated: 2024-08-07T23:53:28.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22352 - http://secunia.com/advisories/16878 - http://www.osvdb.org/19585
CVE ID: CVE-2005-4712 State: PUBLISHED Published: 2006-02-11T11:00:00Z Last Updated: 2024-09-16T17:09:03.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/advisories/read/id=8360
CVE ID: CVE-2005-4713 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T23:53:28.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16564 - http://www.vupen.com/english/advisories/2006/0490 - http://sourceforge.n
ces: - http://www.securityfocus.com/bid/16564 - http://www.vupen.com/english/advisories/2006/0490 - http://sourceforge.net/tracker/index.php?func=detail&aid=1256243&group_id=5741&atid=305741 - http://secunia.com/advisories/18598 - http://sourceforge.net/forum/forum.php?forum_id=499394 - http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml - http://secunia.com/advisories/20690
CVE ID: CVE-2005-4714 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T23:53:28.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/6I00F00EAI.html - http://secunia.com/advisories/17128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22587 - http://www.securityfocus.com/bid/15072 - http://www.osvdb.org/19910
CVE ID: CVE-2005-4715 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T23:53:28.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html - http://secunia.com/advisories/16801 - http://securityreason.com/securityalert/3 - https://exchange.x
2005-09/0226.html - http://secunia.com/advisories/16801 - http://securityreason.com/securityalert/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22247 - http://www.nukefixes.com/ftopict-1779-.html#7641 - http://phpnuke.org/modules.php?name=News&file=article&sid=7434 - http://www.osvdb.org/19351 - http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html - http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html - http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html
CVE ID: CVE-2005-4716 State: PUBLISHED Published: 2006-02-15T11:00:00Z Last Updated: 2024-09-16T23:35:46.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, and (2) cause a denial of service (process failure) via invalid data to a port used by any of certain other processes. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015058 - http://secunia.com/advisories/17185 - http://www.hitachi-support.com/security_e/vuls_e/HS05-020_e/index-e.html
CVE ID: CVE-2005-4717 State: PUBLISHED Published: 2006-02-15T11:00:00Z Last Updated: 2024-09-16T18:33:15.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/arch
htm and IEcrash.rar. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0673.html - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0127.html - http://www.securityfocus.com/bid/15268