Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
al%3Aorg.mitre.oval%3Adef%3A10009 - http://secunia.com/advisories/26103 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.vupen.com/english/advisories/2007/2564 - http://www.debian.org/security/2007/dsa-1337 - http://secunia.com/advisories/26211 - http://secunia.com/advisories/26159 - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - https://exchange.xforce.ibmcloud.com/
07/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35461 - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://secunia.com/advisories/26095 - http://www.securityfocus.com/archive/1/474542/100/0/threaded - http://secunia.com/advisories/26258 - http://www.securityfocus.com/bid/24946 - http://secunia.com/advisories/26460 - http://secunia.com/advisories/26106 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/100/0/threaded - http://www.redhat.com
upport/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2007-0723.html - http://secunia.com/advisories/26271 - http://www.redhat.com/support/errata/RHSA-2007-0722.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://secunia.com/advisories/26204 - http://secunia.com/advisories/26205
CVE ID: CVE-2007-3738 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:28:52.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-490-1 - http://secunia.com/advisories/26107 - http://secunia.com/advisories/26179 - http://www.vupen.com/english/advisories/2007/4256 - http://secunia.com/advisories/25589 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/secu
/25589 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml - http://www.mozilla.org/security/announce/2007/mfsa2007-25.html - http://www.debian.org/security/2007/dsa-1339 - http://www.securitytracker.com/id?1018414 - http://secunia.com/advisories/26151 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/28135 - http://secunia.com/advisories/26216 - http://secunia.com/advisories/26103 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - http://sunsolve.sun.com/sea
visories/26103 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.vupen.com/english/advisories/2007/2564 - http://www.debian.org/security/2007/dsa-1337 - http://secunia.com/advisories/26211 - http://secunia.com/advisories/26159 - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35460 - http://support.novell.com/techcen
ware-12.0/ChangeLog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35460 - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://secunia.com/advisories/26095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9875 - http://www.securityfocus.com/archive/1/474542/100/0/threaded - http://secunia.com/advisories/26258 - http://www.securityfocus.com/bid/24946 - http://secunia.com/advisories/26460 - http://secunia.com/advisories/26106 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/1
01-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2007-0723.html - http://secunia.com/advisories/26271 - http://www.redhat.com/support/errata/RHSA-2007-0722.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://secunia.com/advisories/26204 - http://secunia.com/advisories/26205
CVE ID: CVE-2007-3739 State: PUBLISHED Published: 2007-09-14T01:00:00 Last Updated: 2024-08-07T14:28:52.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2007/1/29/180 - http://secunia.com/advisories/27747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11455 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://se
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A11455 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/27913 - https://bugzilla.redhat.com/show_bug.cgi?id=253313 - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://secunia.com/advisories/26978 - http://www.debian.org/security/2008/dsa-1504 - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/36592 - http://www.ubuntu.com/usn/usn-518-1 - http://secunia.com/advisories/26760 - http://www.redhat.com/support/errata/RHSA-2007-0705.html - http://secunia.com/advisories/26955 - http://secunia.com/advisories/29058 - http://secunia.com/
ta/RHSA-2007-0705.html - http://secunia.com/advisories/26955 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/27436 - http://www.debian.org/security/2007/dsa-1378 - http://secunia.com/advisories/23955
CVE ID: CVE-2007-3740 State: PUBLISHED Published: 2007-09-14T01:00:00 Last Updated: 2024-08-07T14:28:52.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://secunia.com/advisories/27747 - http://www.securityfocus.com/bid/25672 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953 - http://secunia.com/advisories/28806 - http://www.red
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953 - http://secunia.com/advisories/28806 - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://secunia.com/advisories/26978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36593 - http://www.debian.org/security/2008/dsa-1504 - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 - http://secunia.com/advisories/27912 - http://www.ubuntu.com/usn/usn-518-1 - http://secunia.com/advisories/26760 - http://www.redhat.com/support/errata/RHSA-2007-0705.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://lists.opensuse
ort/errata/RHSA-2007-0705.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://secunia.com/advisories/26955 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=253314 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/27436 - http://www.debian.org/security/2007/dsa-1378
CVE ID: CVE-2007-3741 State: PUBLISHED Published: 2007-08-27T17:00:00 Last Updated: 2024-08-07T14:28:52.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42131 - http://secunia.com/advisories/26575 - http://osvdb.org/42128 - http://www.redhat.com/support/errata/RHSA-2007-0513.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
pport/errata/RHSA-2007-0513.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10099 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 - http://secunia.com/advisories/26939 - http://osvdb.org/42129 - http://osvdb.org/42130 - http://www.securityfocus.com/bid/25424
CVE ID: CVE-2007-3742 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:28:52.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" (homographs) and possibly perform phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=306173 - http://www.securityfocus.com/bid/24636 - http://www.vupen.com/english/advisories/2007/2730 - h
icle.html?artnum=306173 - http://www.securityfocus.com/bid/24636 - http://www.vupen.com/english/advisories/2007/2730 - http://docs.info.apple.com/article.html?artnum=306174 - http://secunia.com/advisories/26287 - http://www.securitytracker.com/id?1018488 - http://www.vupen.com/english/advisories/2007/2731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35716 - http://isc.sans.org/diary.html?storyid=3214
CVE ID: CVE-2007-3743 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:28:51.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a bookmark with a long title. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40882 - http://www.securitytracker.com/id?1018495 - http://docs.info.apple.com/article.html?artnum=306174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35712 - http://isc.sans.org/diary.html?
rticle.html?artnum=306174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35712 - http://isc.sans.org/diary.html?storyid=3214
CVE ID: CVE-2007-3744 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:28:52.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35733 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://ww
mcloud.com/vulnerabilities/35733 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.securitytracker.com/id?1018488 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=573 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-3745 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:28:52.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 contains an unsafe interface that is exposed by JDirect, which allows remote attackers to free arbitrary memory and thereby execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35725 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http:
e.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://securitytracker.com/id?1018492 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-3746 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:28:52.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via a crafted applet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35727 - http://docs.info.apple.com/article.html?artnum=306172 - http:
tps://exchange.xforce.ibmcloud.com/vulnerabilities/35727 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://securitytracker.com/id?1018492 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-3747 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:28:52.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://securit
4.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://securitytracker.com/id?1018492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35728 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-3748 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:28:52.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?101
es/35732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?1018493 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-3749 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T14:28:52.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38466 - http://www.securityfocus.com/bid/26444 - http://labs.idefense.com/intelligence/vulnerabi
oud.com/vulnerabilities/38466 - http://www.securityfocus.com/bid/26444 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=630 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-3750 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T14:28:52.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample Descriptor (STSD) atoms in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38549 - http://www.securityfocus.com/bid/26341 - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - http://docs.info.apple.com/article.html?artnum=306896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38268 - http://lists.apple.com/archives/Security-announce
=306896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38268 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - http://www.securitytracker.com/id?1018894 - http://www.vupen.com/english/advisories/2007/3723
CVE ID: CVE-2007-3751 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T14:28:52.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untrusted Java applets that gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - http://docs.info.apple.com/article.html?artnum=306896 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - https://exchange.xforce.ibmcloud.com/vulne
urity-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38271 - http://www.securitytracker.com/id?1018894 - http://www.securityfocus.com/bid/26339 - http://www.kb.cert.org/vuls/id/319771 - http://osvdb.org/38548 - http://www.vupen.com/english/advisories/2007/3723
CVE ID: CVE-2007-3752 State: PUBLISHED Published: 2007-09-06T21:00:00 Last Updated: 2024-08-07T14:28:52.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25567 - http://www.vupen.com/english/advisories/2007/3073 - http://docs.info.apple.com/article.html?artnum=306404 - http://www.securityfocus.com/archive/1/478750/100/0/threaded - http://secunia.com/advisories/26725 -
tml?artnum=306404 - http://www.securityfocus.com/archive/1/478750/100/0/threaded - http://secunia.com/advisories/26725 - http://osvdb.org/38528 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00000.html - https://www.isecpartners.com/advisories/2007-005-itunes.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36485 - http://www.securitytracker.com/id?1018658
CVE ID: CVE-2007-3753 State: PUBLISHED Published: 2007-09-27T21:00:00 Last Updated: 2024-08-07T14:28:52.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, related to insufficient input validation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36844 - http://osvdb.or
info.apple.com/article.html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36844 - http://osvdb.org/38538 - http://secunia.com/advisories/26983 - http://www.securityfocus.com/bid/25855 - http://www.vupen.com/english/advisories/2007/3287 - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3754 State: PUBLISHED Published: 2007-09-27T21:00:00 Last Updated: 2024-08-07T14:28:52.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://www.securityfocus.com/bid/25856 - http://docs.info.apple.com/article.html?artnum=306586 - http://secunia.com/advisories/26983 - https://exchange.xforce.ibmcloud
/docs.info.apple.com/article.html?artnum=306586 - http://secunia.com/advisories/26983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36845 - http://www.vupen.com/english/advisories/2007/3287 - http://securitytracker.com/id?1018752 - http://osvdb.org/38537
CVE ID: CVE-2007-3755 State: PUBLISHED Published: 2007-09-27T21:00:00 Last Updated: 2024-08-07T14:28:52.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36853 - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25862 - http://osvdb.org/38536
http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25862 - http://osvdb.org/38536 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3287 - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3756 State: PUBLISHED Published: 2007-09-27T21:00:00 Last Updated: 2024-08-07T14:28:52.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the parent window is in a different domain. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25859 - ht