Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1003 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.securityfocus.com/bid/28330 - http://lists.apple.com/archives/security-announce/2008/Mar/msg0000
-079A.html - http://www.securityfocus.com/bid/28330 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41334 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1004 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28347 - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
//lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41331 - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1005 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41329 - http://www.securitytracker.com/id?1019656 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.secur
/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.securityfocus.com/bid/28326 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1006 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28332 - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityf
halerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41326 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1007 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:57.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41324 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http:/
tp://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://www.securityfocus.com/bid/28335 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1008 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:57.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41323 - http://www.securityfocus.com/bid/28290 - http:
00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41323 - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://www.securityfocus.com/bid/28336 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1009 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:57.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - http://www.securityfocus.com/bid/28337 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article
s/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41322 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1010 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:56.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41321 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html - http://www.securitytracker.com/id?1019654 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00
0402.html - http://www.securitytracker.com/id?1019654 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28338 - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - http://secunia.com/advisories/29924 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1011 State: PUBLISHED Published: 2008-03-19T00:00:00 Last Updated: 2024-08-07T08:08:57.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that calls a method instance in another frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019653 - http://www.us-cert.gov/cas/techalerts/TA08-079A.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html -
-package-announce/2008-April/msg00402.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html - http://www.securityfocus.com/bid/28290 - http://docs.info.apple.com/article.html?artnum=307563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41320 - http://www.securityfocus.com/bid/28342 - http://secunia.com/advisories/29924 - http://www.vupen.com/english/advisories/2008/0920/references - http://secunia.com/advisories/29393
CVE ID: CVE-2008-1012 State: PUBLISHED Published: 2008-03-20T10:00:00 Last Updated: 2024-08-07T08:08:56.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to "input validation." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019678 - http://www.securityfocus.com/bid/28348 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41325 - http://support.apple.com/kb/HT1226 -
08/Mar/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41325 - http://support.apple.com/kb/HT1226 - http://secunia.com/advisories/29447 - http://www.vupen.com/english/advisories/2008/0955/references
CVE ID: CVE-2008-1013 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019757 - http://support.apple.com/kb/HT1241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41601 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http:
erts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1014 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41602 - http://securitytracker.com/id?1019758 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1015 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:56.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41604 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://securitytracker.com/id?1019759 - http://www.vupen.com/english/advisories/2008/2064/references - http
/2008/1078 - http://securitytracker.com/id?1019759 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.securityfocus.com/bid/28583 - http://secunia.com/advisories/31034 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1016 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41605 - http://securitytracker.com/id?1019760
ocus.com/bid/28583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41605 - http://securitytracker.com/id?1019760 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1017 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.zerodayinitiative.com/advisories/ZDI-08-015 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.s
erodayinitiative.com/advisories/ZDI-08-015 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.securityfocus.com/bid/28583 - http://secunia.com/advisories/31034 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - http://securitytracker.com/id?1019761 - http://secunia.com/advisories/29650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41607 - http://www.securityfocus.com/archive/1/490460/100/0/threaded
CVE ID: CVE-2008-1018 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019762 - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.securityfocus.com/bid/28583 -
ries/2008/1078 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.securityfocus.com/bid/28583 - http://secunia.com/advisories/31034 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41606 - http://www.securityfocus.com/archive/1/490467/100/0/threaded - http://secunia.com/advisories/29650 - http://www.zerodayinitiative.com/advisories/ZDI-08-016
CVE ID: CVE-2008-1019 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41609 - http://www
/1078 - http://www.securityfocus.com/bid/28583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41609 - http://www.zerodayinitiative.com/advisories/ZDI-08-014 - http://secunia.com/advisories/29650 - http://securitytracker.com/id?1019763 - http://www.securityfocus.com/archive/1/490459/100/0/threaded
CVE ID: CVE-2008-1020 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.zerodayinitiative.com/advisories/ZDI-08-017 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid
gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://www.securityfocus.com/archive/1/490468/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41610 - http://securitytracker.com/id?1019764 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1021 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://www.securityfocus.com/archive/1/490462/100/0/threaded - http://securitytr
ttp://www.securityfocus.com/bid/28583 - http://www.securityfocus.com/archive/1/490462/100/0/threaded - http://securitytracker.com/id?1019765 - http://www.zerodayinitiative.com/advisories/ZDI-08-018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41612 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1022 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://www.zerodayinitiative.com/advisories/ZDI-08-019 - http://securitytracker.com/id?1019766 - http://secunia.com/a
- http://www.zerodayinitiative.com/advisories/ZDI-08-019 - http://securitytracker.com/id?1019766 - http://secunia.com/advisories/29650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41613 - http://www.securityfocus.com/archive/1/490461/100/0/threaded
CVE ID: CVE-2008-1023 State: PUBLISHED Published: 2008-04-04T17:00:00 Last Updated: 2024-08-07T08:08:57.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41615 - http://support.apple.com/kb/HT1241 - http://www.us-cert.gov/cas/techalerts/TA08-094A.html - http://www.vupen.com/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://securitytracker.com/id?1019767 - http://
/english/advisories/2008/1078 - http://www.securityfocus.com/bid/28583 - http://securitytracker.com/id?1019767 - http://secunia.com/advisories/29650
CVE ID: CVE-2008-1024 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:08:57.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1467 - http://www.vupen.com/english/advisories/2008/0979/references - http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html - http://www.kb.cert.org/vuls/id/529441 - https://exc
/lists.apple.com/archives/security-announce/2008/Apr/msg00001.html - http://www.kb.cert.org/vuls/id/529441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41864 - http://www.securityfocus.com/bid/28813 - http://www.securitytracker.com/id?1019868
CVE ID: CVE-2008-1025 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:08:57.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1467 - http://secunia.com/advisories/29846 - http://www.kb.cert.org/vuls/id/705529 - http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001
archives/security-announce/2008/Apr/msg00001.html - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.vupen.com/english/advisories/2008/2094/references - http://www.vupen.com/english/advisories/2008/1250/references - http://www.securityfocus.com/bid/28814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41862 - http://www.securitytracker.com/id?1019869 - http://secunia.com/advisories/31074
CVE ID: CVE-2008-1026 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:08:57.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41859 - http://secunia.com/advisories/29846 - http://lists.apple.com/archi
/exchange.xforce.ibmcloud.com/vulnerabilities/41859 - http://secunia.com/advisories/29846 - http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html - http://www.securitytracker.com/id?1019870 - http://www.securityfocus.com/bid/28815 - http://www.securityfocus.com/archive/1/490990/100/0/threaded - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://securityreason.com/securityalert/3815 - http://www.vupen.com/english/advisories/2008/2094/references - http://www.vupen.com/english/advisories/2008/1250/references - http://secunia.com/advisories/31074 - http://www.zerodayinitiative.com/advisories/ZDI-08-022