Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4006 State: PUBLISHED Published: 2007-07-26T00:00:00Z Last Updated: 2024-09-17T02:20:38.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Container: References: - http://www.wslabi.com/wabisabilabi/initPublishedBid.do?
CVE ID: CVE-2007-4007 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 - http://www.securityfocus.com/bid/25042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35632 - http://osvdb.org/39107 - https://www.exploit-db.com/exploits/4221
CVE ID: CVE-2007-4008 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25039 - http://osvdb.org/36919 - https://www.exploit-db.com/exploits/4220 - http://www.vupen.com/english/advisories/2007/2644 - http://secunia.com/advisories/26194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35609
CVE ID: CVE-2007-4009 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://xpkzxc.com/exploits/confixx.txt - ftp://download1.swsoft.com/Confixx/security_hotfix/1/release_notes.txt - http://www.securityfocus.com/bid/25036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35586 - http://secunia.com/advisories/26300 - htt
s.com/bid/25036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35586 - http://secunia.com/advisories/26300 - http://www.vupen.com/english/advisories/2007/2743 - https://www.exploit-db.com/exploits/4219
CVE ID: CVE-2007-4010 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35604 - http://www.securityfocus.com/bid/25041 - https://www.exploit-db.com/exploits/4218
CVE ID: CVE-2007-4011 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request that (1) has a destination MAC address unknown to the Layer-2 infrastructure, aka CSCsj69233; or (2) occurs during Layer-3 roaming across IP subnets, aka CSCsj70841. Additional Analyst Notes: - CVE Program Container: References: - http://
er-3 roaming across IP subnets, aka CSCsj70841. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2636 - http://secunia.com/advisories/26161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35576 - http://www.securityfocus.com/bid/25043 - http://www.securitytracker.com/id?1018444 - http://www.cisco.com/en/US/products/products_security_advisory09186a008088ab28.shtml
CVE ID: CVE-2007-4012 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:06.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (ARP storm) via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2636 - http://secunia.com/advisories/26161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35576 - http://www.securityfocus.co
/secunia.com/advisories/26161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35576 - http://www.securityfocus.com/bid/25043 - http://www.securitytracker.com/id?1018444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44591 - http://www.cisco.com/en/US/products/products_security_advisory09186a008088ab28.shtml
CVE ID: CVE-2007-4013 State: PUBLISHED Published: 2007-07-26T01:00:00 Last Updated: 2024-08-07T14:37:05.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows. NOTE: vector 3 might overlap CVE-2007-3679. Additional Analyst Notes: - CVE Program Container: Reference
ffer overflows. NOTE: vector 3 might overlap CVE-2007-3679. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2583 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - http://osvdb.org/37843 - http://osvdb.org/37844 - http://support.citrix.com/article/CTX113815 - http://support.citrix.com/article/CTX114028 - http://osvdb.org/37842
CVE ID: CVE-2007-4014 State: PUBLISHED Published: 2007-07-26T01:00:00 Last Updated: 2024-08-07T14:37:05.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/37056 - https://e
rty information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/37056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35474 - http://secunia.com/advisories/26109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35472 - http://secunia.com/advisories/26115 - http://www.securityfocus.com/bid/24954 - http://www.osvdb.org/37057 - http://secunia.com/advisories/26116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35473
CVE ID: CVE-2007-4015 State: REJECTED Published: 2007-07-26T01:00:00 Last Updated: 2007-07-31T09:00:00 Description: No description available.
CVE ID: CVE-2007-4016 State: PUBLISHED Published: 2007-07-26T01:00:00 Last Updated: 2024-08-07T14:37:05.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2583 - http://secunia.com/advisories/26143 - http://osvdb.org/43983 - http://www.securityfocus.com/bid/24975 - http://www.securitytracker.com/id?1018435 - http://support.citrix.com/article/CTX113815 - http://supp
us.com/bid/24975 - http://www.securitytracker.com/id?1018435 - http://support.citrix.com/article/CTX113815 - http://support.citrix.com/article/CTX114028
CVE ID: CVE-2007-4017 State: PUBLISHED Published: 2007-07-26T01:00:00 Last Updated: 2024-08-07T14:37:05.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2583 - http://support.citrix.com/article/CTX113817 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - http://osvdb.org/37841 - https://exchange.xforce.ibmcloud.com/vulnerabi
26143 - http://www.securityfocus.com/bid/24975 - http://osvdb.org/37841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35513 - http://www.securitytracker.com/id?1018435 - http://support.citrix.com/article/CTX114028
CVE ID: CVE-2007-4018 State: PUBLISHED Published: 2007-07-26T01:00:00 Last Updated: 2024-08-07T14:37:06.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2583 - http://support.citrix.com/article/CTX113816 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35512 - http://www.securitytracker.com/id?1018435 - http://support.c
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/35512 - http://www.securitytracker.com/id?1018435 - http://support.citrix.com/article/CTX114028 - http://osvdb.org/37840
CVE ID: CVE-2007-4019 State: REJECTED Published: 2007-09-12T01:00:00Z Last Updated: 2024-09-16T20:37:00.356Z Description: No description available.
CVE ID: CVE-2007-4020 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/07/adman-xss-vuln.html - http://secunia.com/advisories/26206 - http://www.securityfocus.com/bid/25057 - http://www.vupen.com/english/advisories/2007/2655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35580 -
25057 - http://www.vupen.com/english/advisories/2007/2655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35580 - http://osvdb.org/36332
CVE ID: CVE-2007-4021 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/07/secure-xss-vuln.html - http://www.vupen.com/english/advisories/2007/2656 - http://www.securityfocus.com/bid/25024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35583
CVE ID: CVE-2007-4022 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:05.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26191 - http://securityreason.com/securityalert/2930 - http://www.securityfocus.com/bid/25047 - http://www.securityfocus.com/archive/1/474556/100/0/threaded - http://www.vupen.com/english/advisories/2007/2688 - https://exchange.xforce.ibmcloud.com/vul
e/1/474556/100/0/threaded - http://www.vupen.com/english/advisories/2007/2688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35652
CVE ID: CVE-2007-4023 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/680449 - http://www.securityfocus.com/bid/25059 - http://www.vupen.com/english/advisories/2007/2646 - http://secunia.com/advisories/26192 - http://www.securitytracker.com/id?1018457 - htt
com/english/advisories/2007/2646 - http://secunia.com/advisories/26192 - http://www.securitytracker.com/id?1018457 - http://osvdb.org/36469 - http://www.arubanetworks.com/support/alerts/aid-070907b.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/35605
CVE ID: CVE-2007-4024 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25055 - http://www.vupen.com/english/advisories/2007/2645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35598 - http://secunia
www.vupen.com/english/advisories/2007/2645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35598 - http://secunia.com/advisories/26182
CVE ID: CVE-2007-4025 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25058 - http://osvdb.org/37250 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103000-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35579 - http://www.securitytracker.com/id?1018452 - http://sunsolve.sun.com/search/document.
bmcloud.com/vulnerabilities/35579 - http://www.securitytracker.com/id?1018452 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201537-1 - http://secunia.com/advisories/26187 - http://www.vupen.com/english/advisories/2007/2647
CVE ID: CVE-2007-4026 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving the gallery images upload feature. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38600 - http://sourceforge.net/project/shownotes.php?release_id=527102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35596 - http://secunia.com/advisories/2617
.php?release_id=527102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35596 - http://secunia.com/advisories/26175
CVE ID: CVE-2007-4027 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:06.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. NOTE: this program is not setuid by default, but there are some usage scenarios in which an administrator might make it setuid. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35546 - http://osvdb.org/38999 - http://www.securityfocus.com/archive/1/474415/100/0/threaded - http://securityreason.com/securityalert/2928 - http://www.devtarget
.securityfocus.com/archive/1/474415/100/0/threaded - http://securityreason.com/securityalert/2928 - http://www.devtarget.org/areca-advisory-07-2007.txt
CVE ID: CVE-2007-4028 State: PUBLISHED Published: 2007-07-26T19:00:00 Last Updated: 2024-08-07T14:37:05.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26172 - http://securityreason.com/securityalert/2927 - http://www.securityfocus.com/archive/1/474416/100/0/threaded - http://www.securityfocus.com/bid/25012 - http://osvdb.org/37516
CVE ID: CVE-2007-4029 State: PUBLISHED Published: 2007-07-26T22:00:00 Last Updated: 2024-08-07T14:37:06.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.isecpartners.com/advisories/2007-003-libvorbis.txt - https://issues.rpath.com/browse/RPL-1590 - http://www.ubuntu.com/
w.isecpartners.com/advisories/2007-003-libvorbis.txt - https://issues.rpath.com/browse/RPL-1590 - http://www.ubuntu.com/usn/usn-498-1 - http://www.vupen.com/english/advisories/2007/2760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35624 - http://secunia.com/advisories/26299 - https://bugzilla.redhat.com/show_bug.cgi?id=249780 - http://secunia.com/advisories/28614 - http://www.debian.org/security/2008/dsa-1471 - http://secunia.com/advisories/26429 - http://www.redhat.com/support/errata/RHSA-2007-0912.html - http://security.gentoo.org/glsa/glsa-200710-03.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10570 - https://exchange.xforce.ibmclo
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35623 - http://securitytracker.com/id?1018712 - http://secunia.com/advisories/26087 - http://www.securityfocus.com/bid/25082 - http://www.securityfocus.com/archive/1/474729/100/0/threaded - http://www.tellini.org/blog/archives/32-Music-Box-1.6.html - http://secunia.com/advisories/24923 - http://secunia.com/advisories/26535 - http://secunia.com/advisories/27439 - http://www.vupen.com/english/advisories/2007/2698 - http://secunia.com/advisories/27099 - http://secunia.com/advisories/26232 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-
dvisories/27099 - http://secunia.com/advisories/26232 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-1 - http://secunia.com/advisories/26865 - http://www.novell.com/linux/security/advisories/2007_23_sr.html - http://www.redhat.com/support/errata/RHSA-2007-0845.html
CVE ID: CVE-2007-4031 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4230 - http://securitytracker.com/id?1018469 - http://www.nessus.org/news/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 - ht
tytracker.com/id?1018469 - http://www.nessus.org/news/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 - http://secunia.com/advisories/26243 - http://www.vupen.com/english/advisories/2007/2680 - http://www.securityfocus.com/bid/25088
CVE ID: CVE-2007-4032 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long string in a .mls Playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35625 - http://osvdb.org/38689 - http://www.securityfocus.com/bid/25083 - http://secunia.com/advisories/26198
CVE ID: CVE-2007-4033 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:37:06.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200710-12.xml - http://secunia.com/advisories/27743 - http://secunia.com/advisories/26901 - https://oval.ci
rg/glsa/glsa-200710-12.xml - http://secunia.com/advisories/27743 - http://secunia.com/advisories/26901 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35620 - http://fedoranews.org/updates/FEDORA-2007-234.shtml - http://www.securityfocus.com/archive/1/480239/100/100/threaded - http://www.debian.org/security/2007/dsa-1390 - http://secunia.com/advisories/27297 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.securityfocus.com/archive/1/485823/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007 - https://bugzilla.redhat.com/show_bug.cgi?id=303021 - https://www
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007 - https://bugzilla.redhat.com/show_bug.cgi?id=303021 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html - http://www.redhat.com/support/errata/RHSA-2007-1031.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:189 - https://www.exploit-db.com/exploits/4227 - http://secunia.com/advisories/30168 - https://issues.rpath.com/browse/RPL-1972 - http://secunia.com/advisories/27239 - http://secunia.com/advisories/26241 - http://www.securityfocus.com/archive/1/480244/100/100/threaded - http://www.securityfocus.com/bid/25079 - http://secunia.com/advisories/27718 - http://www.bugtraq.ir/adv/t1lib.txt