Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3683 State: PUBLISHED Published: 2008-08-14T20:00:00 Last Updated: 2024-08-07T09:45:19.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44413 - http://www.securityfocus.com/bid/30671 - http://www.vupen.com/english/advisories/2008/2366 - http://sunsolve.sun.com/search/document.do?
ityfocus.com/bid/30671 - http://www.vupen.com/english/advisories/2008/2366 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1 - http://secunia.com/advisories/31476 - http://www.securitytracker.com/id?1020696
CVE ID: CVE-2008-3684 State: PUBLISHED Published: 2009-10-22T15:26:00Z Last Updated: 2024-09-17T04:19:47.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-096/ - http://secunia.com/advisories/37070
CVE ID: CVE-2008-3685 State: PUBLISHED Published: 2009-10-22T15:26:00Z Last Updated: 2024-09-16T18:09:01.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-095/ - http://secunia.com/advisories/37070
CVE ID: CVE-2008-3686 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-07T09:45:19.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44605 - http://secunia.com/advisories/31579 - http://www.vupen.com/english/advisories/2008/2422 - http://lkml.org/lkml/2008/8/7/230 -
//secunia.com/advisories/31579 - http://www.vupen.com/english/advisories/2008/2422 - http://lkml.org/lkml/2008/8/7/230 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e0115e500fe9dd2ca11e6f92db9123204f1327a - http://lkml.org/lkml/2008/8/8/7
CVE ID: CVE-2008-3687 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-07T09:45:19.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary code via the flask_op hypercall. Additional Analyst Notes: - CVE Program Container: References: - http://theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html - http://www.securityfocus.com/bid/30834 - http://www.nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html - https://exchange.xforce.ibmclou
www.nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44608 - http://secunia.com/advisories/31561 - http://xenbits.xensource.com/xen-3.3-testing.hg?rev/fa66b33f975a - http://invisiblethingslab.com/bh08/part2.pdf - http://www.vupen.com/english/advisories/2008/2426 - http://www.securitytracker.com/id?1020731
CVE ID: CVE-2008-3688 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-07T09:45:19.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30697 - http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml - https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com - http://secunia.com/advisories/31494 - https://exchange.
mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com - http://secunia.com/advisories/31494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44467 - http://www.securitytracker.com/id?1020900 - http://secunia.com/advisories/31971 - http://www.server-side.de/index.htm
CVE ID: CVE-2008-3691 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
//www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://secunia.com/advisories/31707 - http://secunia.com/advisories/31708 - http://securityreason.com/securityalert/4202 - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2008-3692 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
CVE ID: CVE-2008-3693 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3694, CVE-2008-3695, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
CVE ID: CVE-2008-3694 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3695, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3695, and CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
CVE ID: CVE-2008-3695 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
CVE ID: CVE-2008-3696 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-36
tack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3695. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/
CVE ID: CVE-2008-3697 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://www.securitytracker.com/id?1020789 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/0
www.securityfocus.com/archive/1/495869/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://secunia.com/advisories/31708 - http://securityreason.com/securityalert/4202 - http://www.securityfocus.com/bid/30935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44796 - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2008-3698 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:19.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors. Additional Analyst Notes: - CVE Program Container: Reference
sers to gain privileges on the host OS via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://www.securityfocus.com/bid/30936 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44795 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.secu
port/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://securitytracker.com/id?1020790 - http://secunia.com/advisories/31707 - http://securityreason.com/securityalert/4202 - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2008-3699 State: PUBLISHED Published: 2008-08-14T23:00:00 Last Updated: 2024-08-07T09:45:19.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32357 - http://websvn.kde.org/?view=rev&revision=846626 - http://secunia.com/advisories/31418 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:172 - http://www.ubuntu.com/usn/usn-657-1 - http://bugs.d
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:172 - http://www.ubuntu.com/usn/usn-657-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765 - http://amarok.kde.org/en/releases/1/4/10 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00057.html - http://www.vupen.com/english/advisories/2008/2338 - http://secunia.com/advisories/31663 - http://security.gentoo.org/glsa/glsa-200809-08.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44399 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.455790 - http://www.securityfocus.com/bid/30662 - https://www.redhat.com/archives/fedora-package-announce/2008-
security.455790 - http://www.securityfocus.com/bid/30662 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00097.html - http://secunia.com/advisories/31839
CVE ID: CVE-2008-3700 State: PUBLISHED Published: 2008-08-15T20:06:00 Last Updated: 2024-08-07T09:45:19.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=0012
Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00123-08092008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44382 - http://osvdb.org/47615 - http://forums.kayako.com/f3/3-30-00-stable-released-18304/ - http://osvdb.org/47614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44383 - http://osvdb.org/47613 - http://secunia.com/advisories/31431 - http://www.securityfocus.com/bid/30642
CVE ID: CVE-2008-3701 State: PUBLISHED Published: 2008-08-15T20:06:00 Last Updated: 2024-08-07T09:45:19.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00123-08092008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44384 - http://osvdb.org/47616 - http://forums.kayako.com/f3/3-30-00-stable-released-18304/ - http://secunia.com/advisories/31431
tp://osvdb.org/47616 - http://forums.kayako.com/f3/3-30-00-stable-released-18304/ - http://secunia.com/advisories/31431 - http://www.securityfocus.com/bid/30642
CVE ID: CVE-2008-3702 State: PUBLISHED Published: 2008-08-15T20:06:00 Last Updated: 2024-08-07T09:45:19.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6216 - http://securityreason.com/securityalert/4159 - http://www.securityfocus.com/bid/30621 - https://exchange.xforce.ibmcloud.com/
//securityreason.com/securityalert/4159 - http://www.securityfocus.com/bid/30621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44412
CVE ID: CVE-2008-3703 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T09:45:19.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279. Additional Analyst Notes: - CVE Program Container: References: - http://secun
se of an incomplete fix for CVE-2007-2279. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31486 - http://www.securityfocus.com/archive/1/495481 - http://www.zerodayinitiative.com/advisories/ZDI-08-053/ - http://www.symantec.com/avcenter/security/Content/2008.08.14a.html - http://www.securityfocus.com/bid/30596 - http://www.vupen.com/english/advisories/2008/2395 - http://seer.entsupport.symantec.com/docs/306386.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44466 - http://securityreason.com/securityalert/4161 - http://www.securityfocus.com/archive/1/495487/100/0/threaded - http://securitytracker.com/id?1020699
CVE ID: CVE-2008-3704 State: PUBLISHED Published: 2008-08-18T19:00:00 Last Updated: 2024-08-07T09:45:19.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability." Additional Analys
," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020710 - http://www.vupen.com/english/advisories/2008/2380 - http://www.vupen.com/english/advisories/2008/3382 - http://secunia.com/advisories/31498 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5794 - http://www.securityfocus.com/bid/30674 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - https://www.exploit-db.com/exploits/6244 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.go