Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0179 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:10:03.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10136 - http://security.gentoo.org/glsa/glsa-200405-04.xml - http://www.redhat.com/support/errata/RHSA-2004-157.html - http://marc.info/?l=bugtraq&m=108213873203477&w=2 - http://security.gentoo.org/glsa/gls
port/errata/RHSA-2004-157.html - http://marc.info/?l=bugtraq&m=108213873203477&w=2 - http://security.gentoo.org/glsa/glsa-200405-01.xml - http://www.redhat.com/support/errata/RHSA-2004-160.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:032 - http://www.debian.org/security/2004/dsa-487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913 - http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-158.htm
ches.sgi.com/support/free/security/advisories/20040404-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-158.html - http://www.redhat.com/support/errata/RHSA-2004-159.html - http://marc.info/?l=bugtraq&m=108214147022626&w=2 - http://secunia.com/advisories/11363 - http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html - https://bugzilla.fedora.us/show_bug.cgi?id=1552 - http://www.osvdb.org/5365
CVE ID: CVE-2004-0180 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:10:03.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11548 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9462 - http://secunia.
f%3A1042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9462 - http://secunia.com/advisories/11400 - http://secunia.com/advisories/11375 - http://www.debian.org/security/2004/dsa-486 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:028 - http://secunia.com/advisories/11368 - http://secunia.com/advisories/11380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15864 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181 - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - ftp://ftp.freebsd.org/p
are-security.400181 - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc - http://secunia.com/advisories/11374 - http://secunia.com/advisories/11377 - http://security.gentoo.org/glsa/glsa-200404-13.xml - http://secunia.com/advisories/11371 - http://www.redhat.com/support/errata/RHSA-2004-153.html - http://marc.info/?l=bugtraq&m=108636445031613&w=2 - http://secunia.com/advisories/11405 - http://www.redhat.com/support/errata/RHSA-2004-154.html - http://secunia.com/advisories/11391
CVE ID: CVE-2004-0181 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:10:03.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108213675028441&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10329 - http://www.turbolinux.com/security/2004/TLSA-2004-14.txt - http://secunia.com/advisories/17002 - h
.oval%3Adef%3A10329 - http://www.turbolinux.com/security/2004/TLSA-2004-14.txt - http://secunia.com/advisories/17002 - http://www.securityfocus.com/bid/10143 - http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15902 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 - http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE ID: CVE-2004-0182 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:10:03.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-156.html - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc
CVE ID: CVE-2004-0183 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:10:03.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/240790 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9971 - http://www.redhat.com/support/errata/RHSA-2004-219.html - http://securityt
finition/oval%3Aorg.mitre.oval%3Adef%3A9971 - http://www.redhat.com/support/errata/RHSA-2004-219.html - http://securitytracker.com/id?1009593 - http://www.debian.org/security/2004/dsa-478 - http://secunia.com/advisories/11258 - http://www.trustix.org/errata/2004/0015 - http://secunia.com/advisories/11320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15680 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A972 - http://www.rapid7.com/advisories/R7-0017.html - http://www.securityfocus.com/bid/10003 - https://bugzilla.fedora.us/show_bug.cgi?id=1468 - http://www.tcpdump.org/tcpdump-changes.txt - http://marc.info/?l=bugtraq&m=108067265931525&w=2
CVE ID: CVE-2004-0184 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:10:03.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/492558 - http://www.redhat.com/support/errata/RHSA-2004-219.html - http://securitytracke
http://www.kb.cert.org/vuls/id/492558 - http://www.redhat.com/support/errata/RHSA-2004-219.html - http://securitytracker.com/id?1009593 - http://www.debian.org/security/2004/dsa-478 - http://secunia.com/advisories/11258 - http://www.trustix.org/errata/2004/0015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9581 - http://www.rapid7.com/advisories/R7-0017.html - https://bugzilla.fedora.us/show_bug.cgi?id=1468 - http://www.securityfocus.com/bid/10004 - http://www.tcpdump.org/tcpdump-changes.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A976 - http://marc.info/?l=bugtraq&m=108067265931525&w=2 - https://exch
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A976 - http://marc.info/?l=bugtraq&m=108067265931525&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15679
CVE ID: CVE-2004-0185 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch - http://www.securityfocus.com/bid/8893 - http://www.debian.org/security/2004/dsa-457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13518 - http://www.secur
p://www.debian.org/security/2004/dsa-457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13518 - http://www.securiteam.com/unixfocus/6X00Q1P8KC.html - http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt - http://www.redhat.com/support/errata/RHSA-2004-096.html
CVE ID: CVE-2004-0186 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107657505718743&w=2 - http://www.osvdb.org/3916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15131 - http://marc.info/?l=bugtraq&m=107636290906296&w=2 - http://www.debian.org/security/2004/
oud.com/vulnerabilities/15131 - http://marc.info/?l=bugtraq&m=107636290906296&w=2 - http://www.debian.org/security/2004/dsa-463 - http://www.securityfocus.com/bid/9619
CVE ID: CVE-2004-0187 State: REJECTED Published: 2004-03-04T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0188 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9756 - http://www.securityfocus.com/bid/9776 - http://www.debian.org/security/2004/dsa-461 - http://marc.info/?l=bugtraq&m=107789737832092&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15335
CVE ID: CVE-2004-0189 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - http://www.squid-cache.org/Advisories/SQUID-2004_1.
patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - http://www.squid-cache.org/Advisories/SQUID-2004_1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15366 - http://www.debian.org/security/2004/dsa-474 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A877 - http://www.securityfocus.com/bid/9778 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A941 - http://www.redhat.com/support/errata/RHSA-2004-133.html - http://www.redhat.com/support/errata/RHSA-2004-134.html - http://marc.info/?l=bugtraq&m=108084935904110&w=2 - htt
html - http://www.redhat.com/support/errata/RHSA-2004-134.html - http://marc.info/?l=bugtraq&m=108084935904110&w=2 - http://security.gentoo.org/glsa/glsa-200403-11.xml - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000838 - http://www.osvdb.org/5916
CVE ID: CVE-2004-0190 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15212 - http://marc.info/?l=bugtraq&m=107694794031839&w=2 - http://www.securityfocus.com/bid/9784 - http://www.osvdb.org/4117 - http://lists.grok.org.uk/pipermail/full-
31839&w=2 - http://www.securityfocus.com/bid/9784 - http://www.osvdb.org/4117 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html
CVE ID: CVE-2004-0191 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-110.html - http://www.redhat.com/support/errata/RHSA-2004-112.html - http://marc.info/?l=bugtraq&m=108448379429944&w=2 - http://www.osvdb.org/4062
at.com/support/errata/RHSA-2004-112.html - http://marc.info/?l=bugtraq&m=108448379429944&w=2 - http://www.osvdb.org/4062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15322 - http://www.securityfocus.com/bid/9747 - http://marc.info/?l=bugtraq&m=107774710729469&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874 - http://bugzilla.mozilla.org/show_bug.cgi?id=227417
CVE ID: CVE-2004-0192 State: PUBLISHED Published: 2004-03-04T05:00:00 Last Updated: 2024-08-08T00:10:03.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15330 - http://marc.info/?l=bugtraq&m=107790684732458&w=2
CVE ID: CVE-2004-0193 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org
on request with a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/150326 - http://xforce.iss.net/xforce/alerts/id/165 - http://www.osvdb.org/4072 - http://secunia.com/advisories/10988 - http://marc.info/?l=bugtraq&m=107789851117176&w=2 - http://www.eeye.com/html/Research/Upcoming/20040213.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15207 - http://www.eeye.com/html/Research/Advisories/AD20040226.html - http://www.securityfocus.com/bid/9752
CVE ID: CVE-2004-0194 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4135 - http://www.securityfocus.com/bid/9802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15384 - http://marc.info/?l=bugtraq&m=107842545022724&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html - http://www
l=bugtraq&m=107842545022724&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html - http://www.nextgenss.com/advisories/adobexfdf.txt
CVE ID: CVE-2004-0197 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:10:03.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15703 - http://www.securityfocus.com/bid/10112 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-014 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://www.kb.cert.org/vuls/id/740716 - https://oval.cisecurity.org/repository/sear
.gov/cas/techalerts/TA04-104A.html - http://www.kb.cert.org/vuls/id/740716 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A968
CVE ID: CVE-2004-0199 State: PUBLISHED Published: 2004-05-14T04:00:00 Last Updated: 2024-08-08T00:10:03.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm). Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-015 - http://marc.info/?l=full-disclosure&m=108430407801825&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160
5 - http://marc.info/?l=full-disclosure&m=108430407801825&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16095 - http://www.securityfocus.com/bid/10321 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1032 - http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt - http://marc.info/?l=bugtraq&m=108437759930820&w=2 - http://www.kb.cert.org/vuls/id/484814
CVE ID: CVE-2004-0200 State: PUBLISHED Published: 2004-09-17T04:00:00 Last Updated: 2024-08-08T00:10:03.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A3038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1105 - http://www.kb.cert.org/vuls/id/297462 - http://www.us-cert.gov/cas/techalerts/TA04-260A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2706 - http://marc.info/?l=bugtraq&m=109524346729948&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1721 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082 - https://docs.microsoft.com/en-
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3810 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16304
CVE ID: CVE-2004-0201 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:10:03.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155 - http://www.kb.cert.org/vuls/id/920060 - http://www.us-cert.gov/cas/techalerts/TA04-196A.html
.mitre.oval%3Adef%3A2155 - http://www.kb.cert.org/vuls/id/920060 - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16586
CVE ID: CVE-2004-0202 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:10:03.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16306 - http://www.osvdb.org/6742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413 - https://docs.microsoft.com/en-us/security-updates/s