Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1067 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - http://osvdb.org/33045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32624 - http://www.vupen.com/e
ies/24258 - http://osvdb.org/33045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32624 - http://www.vupen.com/english/advisories/2007/0690 - http://www.securityfocus.com/bid/22648 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml - http://www.securitytracker.com/id?1017683 - http://www.securitytracker.com/id?1017684
CVE ID: CVE-2007-1068 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCs
ntials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - http://osvdb.org/33046 - http://www.vupen.com/english/advisories/2007/0690 - http://www.securityfocus.com/bid/22648 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml - http://www.securitytracker.com/id?1017683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32626 - http://www.securitytracker.com/id?1017684
CVE ID: CVE-2007-1069 State: PUBLISHED Published: 2007-05-02T19:00:00 Last Updated: 2024-08-07T12:43:22.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual machine crash) by triggering certain general protection faults (GPF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23732 - http://www.vupen.com/english/advisories/2007/1592 - http://osvdb.org/35507 - http://www.securityfocus.com/archive/1/469011/30/6510/threaded - http://secunia.com/advisories/25079 - http://www.reversemode.com/index.php?option=com_remosito
469011/30/6510/threaded - http://secunia.com/advisories/25079 - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=49 - http://www.securitytracker.com/id?1018011 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33994 - http://www.securityfocus.com/archive/1/467936/30/6690/threaded - http://www.securityfocus.com/archive/1/467836/100/0/threaded
CVE ID: CVE-2007-1070 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll. Additional Analyst Notes: - CVE Program Container: References: -
gInfo and (5) ENG_SendEMail functions in (b) eng50.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.tippingpoint.com/security/advisories/TSRT-07-01.html - http://www.kb.cert.org/vuls/id/466609 - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txt - http://secunia.com/advisories/24243 - http://osvdb.org/33042 - http://www.kb.cert.org/vuls/id/630025 - http://www.securityfocus.com/archive/1/460690/100/0/threaded - http://www.securityfocus.com/archive/1/460686/100/0/threaded - http://www.kb.cert.org/vuls/id/730433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32594 - http://esupport.trendmicro.com/support/viewxml.d
d/730433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32594 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290 - http://www.securityfocus.com/bid/22639 - http://www.vupen.com/english/advisories/2007/0670 - http://www.tippingpoint.com/security/advisories/TSRT-07-02.html - http://www.kb.cert.org/vuls/id/349393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32601 - http://www.securitytracker.com/id?1017676
CVE ID: CVE-2007-1071 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-07T12:43:22.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image that triggers the overflow during decompression. NOTE: this is a different issue than CVE-2006-3502 and CVE-2006-3503. Additional Analyst Notes: - CVE Program Container: References: - http://security-protocols.com/sp-x39-advisory.php - http://www.securityfocus.com/bid/22630 - http://www.us-cert.gov/cas/techalerts
urity-protocols.com/sp-x39-advisory.php - http://www.securityfocus.com/bid/22630 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.osvdb.org/34854 - http://www.kb.cert.org/vuls/id/559444 - http://www.vupen.com/english/advisories/2007/0930 - http://www.securitytracker.com/id?1017758 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-1072 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-07T12:43:22.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://secunia.com/advisories/2
70221-phone.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://secunia.com/advisories/24262 - http://www.securityfocus.com/bid/22647 - http://osvdb.org/33064
CVE ID: CVE-2007-1073 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-07T12:43:22.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2283 - http://www.securityfocus.com/archive/1/459796/100/200/threaded - http://osvdb.org/42619
CVE ID: CVE-2007-1074 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-07T12:43:22.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long (1) DataPath or (2) DownloadPath attributed in a (a) NBI file, or (3) a long group field in a (b) NZB file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32608 - http://osvdb.org/33377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32598 - http://www.securityfocus.com/bid/22652 - http://secunia.com/advisories/2
nge.xforce.ibmcloud.com/vulnerabilities/32598 - http://www.securityfocus.com/bid/22652 - http://secunia.com/advisories/24261 - http://osvdb.org/33378 - https://www.exploit-db.com/exploits/3349 - http://www.vupen.com/english/advisories/2007/0694
CVE ID: CVE-2007-1075 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-07T12:43:22.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline characters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33751 - https://www.exploit-db.com/exploits/3341 - http://www.securityfocus.com/bid/22634
CVE ID: CVE-2007-1076 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to include arbitrary local files via a .. (dot dot) in the (1) file parameter to plotStat.php and the (2) lang parameter to banref.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24242 - http://attrition.org/pipermail/vim/2007-February/001377.html - http://www.vupen.com/english/advisories/2007/0709 - http://soft.zoneo.net/phpTrafficA/news.php - http://www.securityfo
- http://www.vupen.com/english/advisories/2007/0709 - http://soft.zoneo.net/phpTrafficA/news.php - http://www.securityfocus.com/bid/22655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32628 - http://www.bugtraq.ir/articles/file-inclusion/phpTrafficA-1.4.1-Local-File-Inclusion/1 - http://osvdb.org/33373 - http://osvdb.org/33374
CVE ID: CVE-2007-1077 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36843 - http://www.securityfocus.com/bid/22636
CVE ID: CVE-2007-1078 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the func parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32635 - http://www.securityfocus.com/bid/22646 - http://www.securityfocus.com/archive/1/460951/100/0/threaded - http://secunia.com/advisories/24267 - https://www.exploit-db.com/exploits/3360 - http
/archive/1/460951/100/0/threaded - http://secunia.com/advisories/24267 - https://www.exploit-db.com/exploits/3360 - http://osvdb.org/33492
CVE ID: CVE-2007-1079 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Rhino Software, Inc. FTP Voyager 14.0.0.3 and earlier allows remote servers to cause a denial of service (crash) via a long response to a CWD command, which triggers the overflow when the user aborts the command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32593 - https://www.exploit-db.com/exploits/3343 - http://osvdb.org/33746
CVE ID: CVE-2007-1080 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1) long filename in a response to a LIST command, and (2) a long response to a CWD command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3341 - http://osvdb.org/33782 - http://www.securityfocus.com/bid/22634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32605 - http://osvdb.org/33752
CVE ID: CVE-2007-1081 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20070221-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32630 - http://secunia.com/advisories/24207 - http://www.vupen.com/english/advisories/2007/0697 - http://osvdb.org/3347
/32630 - http://secunia.com/advisories/24207 - http://www.vupen.com/english/advisories/2007/0697 - http://osvdb.org/33471 - http://www.securityfocus.com/bid/22668
CVE ID: CVE-2007-1082 State: PUBLISHED Published: 2007-02-22T23:00:00 Last Updated: 2024-08-07T12:43:22.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause a denial of service (CPU consumption) via a long response to a PWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22640 - http://www.attrition.org/pipermail/vim/2007-March/001470.html - https://www.exploit-db.com/exploits/3347 - http://osvdb.org/33496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32606
CVE ID: CVE-2007-1083 State: PUBLISHED Published: 2007-02-23T00:00:00 Last Updated: 2024-08-07T12:43:22.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33479 - http://secunia.com/advisories/24249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32639 - http://www.kb.cert.org/vuls/id/308087 - http://jvn.jp/cert/JV
tps://exchange.xforce.ibmcloud.com/vulnerabilities/32639 - http://www.kb.cert.org/vuls/id/308087 - http://jvn.jp/cert/JVNVU%23308087/index.html - https://download.verisign.co.jp/support/announce/20070216.html - http://attrition.org/pipermail/vim/2007-February/001385.html - http://www.securitytracker.com/id?1017693 - http://www.securityfocus.com/bid/22676 - http://www.securityfocus.com/bid/22671 - http://attrition.org/pipermail/vim/2007-February/001384.html - http://www.jpcert.or.jp/at/2007/at070006.txt - http://www.securitytracker.com/id?1017692 - http://www.securitytracker.com/id?1017694 - http://www.vupen.com/english/advisories/2007/0702 - http://labs.idefense.com/intelligence/vulnerabilit
.com/id?1017694 - http://www.vupen.com/english/advisories/2007/0702 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
CVE ID: CVE-2007-1084 State: PUBLISHED Published: 2007-02-23T00:00:00 Last Updated: 2024-08-07T12:43:22.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461021/100/0/threaded - http://www.securityfocus.com/archive/1/460896/100/0/threaded - http://osvdb.org/33803 - http://lcamtuf.coredump.cx/ffbook - ht
/www.securityfocus.com/archive/1/460896/100/0/threaded - http://osvdb.org/33803 - http://lcamtuf.coredump.cx/ffbook - http://www.securityfocus.com/archive/1/460890/100/0/threaded - http://securityreason.com/securityalert/2304 - http://www.securityfocus.com/archive/1/460885/100/0/threaded - http://lcamtuf.coredump.cx/ffbook/ - http://www.heise-security.co.uk/news/85728 - https://bugzilla.mozilla.org/show_bug.cgi?id=371179 - http://www.securityfocus.com/bid/22666 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0490.html
CVE ID: CVE-2007-1085 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T12:43:22.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system, by using an XSS vulnerability in google.com to extract the signature for the internal web server, then calling the "under" parameter in Advanced Search with the proper signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017686 - http://www.watchfire.com/resources/Overtaking-
gram Container: References: - http://www.securitytracker.com/id?1017686 - http://www.watchfire.com/resources/Overtaking-Google-Desktop.pdf - http://www.securityfocus.com/archive/1/460735/100/0/threaded - http://www.securityfocus.com/archive/1/460928/100/0/threaded - http://www.kb.cert.org/vuls/id/615857 - http://securityreason.com/securityalert/2301 - http://www.securityfocus.com/bid/22650 - http://osvdb.org/33483
CVE ID: CVE-2007-1086 State: PUBLISHED Published: 2007-02-23T22:00:00 Last Updated: 2024-08-07T12:43:22.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access." Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www-1.ibm.com/support/docview.wss?uid=swg21255747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32650 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 -
e.xforce.ibmcloud.com/vulnerabilities/32650 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 - http://www.securityfocus.com/bid/22677 - http://osvdb.org/40969
CVE ID: CVE-2007-1087 State: PUBLISHED Published: 2007-02-23T22:00:00 Last Updated: 2024-08-07T12:43:22.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40970 - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www-1.ibm.com/support/docview.wss?uid=swg21255747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32651 - http://labs.ide
m.com/support/docview.wss?uid=swg21255747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32651 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 - http://www.securityfocus.com/bid/22677
CVE ID: CVE-2007-1088 State: PUBLISHED Published: 2007-02-23T22:00:00 Last Updated: 2024-08-07T12:43:22.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www-1.ibm.com/support/docview.wss?uid=swg21255747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32652 - http://osvdb.org/40971 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?
.com/vulnerabilities/32652 - http://osvdb.org/40971 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 - http://www.securityfocus.com/bid/22677
CVE ID: CVE-2007-1089 State: PUBLISHED Published: 2007-02-23T22:00:00 Last Updated: 2024-08-07T12:43:22.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24283 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR25941 - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www.vupen.com/english/advisories/2007/0721
CVE ID: CVE-2007-1090 State: PUBLISHED Published: 2007-02-26T11:00:00 Last Updated: 2024-08-07T12:43:22.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461373/100/0/threaded - http://www.securityfocus.com/bid/22715 - http://osvdb.org/34490 - http://securityvulns.com/Qdocument170.html - http://securityvulns.com/news/Microsoft/Windows/Explorer/DoS.html
CVE ID: CVE-2007-1091 State: PUBLISHED Published: 2007-02-26T11:00:00 Last Updated: 2024-08-07T12:43:22.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers. Additional Analyst Notes: - CVE Program Container: References: - http://lcamtuf.coredump.cx/ietrap - http://www.securityfocus.com/bid/22680 - http://www.vupen.com/english/advisories/2007/0713 - http://www.securityfocus.com/archive/1/461023/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 - http://www.securityfocus.c
rchive/1/461023/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://secunia.com/advisories/23014 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2162 - http://www.securityfocus.com/archive/1/461027/100/0/threaded - http://securitytracker.com/id?1018788 - http://securityreason.com/securityalert/2291 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html - https://docs.microsoft.com/en-us/security-updates/security
.org.uk/pipermail/full-disclosure/2007-February/052630.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html