Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0362 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015511 - http://www.osvdb.org/22504 - http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp - http://secunia.com/advisories/18515 - http://isc.sans.
504 - http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp - http://secunia.com/advisories/18515 - http://isc.sans.org/diary.php?storyid=1042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24200 - http://www.securityfocus.com/bid/16299
CVE ID: CVE-2006-0363 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program. NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherent
tly insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort. Perhaps this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421921/100/0/threaded - http://www.securityfocus.com/archive/1/422283/100/0/threaded - http://www.msn-password-recovery.com/
CVE ID: CVE-2006-0364 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0255 - https://exchange.xforce.ibmcloud.com/vulnerabi
tainer: References: - http://www.vupen.com/english/advisories/2006/0255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24225 - http://www.securityfocus.com/bid/16308 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0332.html - http://www.osvdb.org/22628 - http://secunia.com/advisories/18544
CVE ID: CVE-2006-0365 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24208 - http://www.securityfocus.com/archive/1/422277/100/0/threaded - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2006-0366 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422265/100/0/threaded - https://archive.cert.uni-stuttgart.de/bugtraq/2006/01/msg00343.html - http://www.securityfocus.com/bid/16300 - http://secunia.com/advisories/18541 - http://www.vupen.com/english/advisories/2006/0254
CVE ID: CVE-2006-0367 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:13.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18501 - http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml - http://www.securityfocus.com/bid/16293 - https://exchange.xforc
isco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml - http://www.securityfocus.com/bid/16293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24172 - http://securitytracker.com/id?1015502 - http://www.vupen.com/english/advisories/2006/0250 - http://www.osvdb.org/22621
CVE ID: CVE-2006-0368 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015503 - http://www.vupen.com/eng
l Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015503 - http://www.vupen.com/english/advisories/2006/0249 - http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24180 - http://www.securityfocus.com/bid/16295 - http://www.osvdb.org/22623 - http://www.osvdb.org/22622 - http://securityreason.com/securityalert/359 - http://secunia.com/advisories/18494
CVE ID: CVE-2006-0369 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423180/30/7310/threaded - http://www.securityfocus.com/archive/1/423228/100/0/thre
ttp://www.securityfocus.com/archive/1/423180/30/7310/threaded - http://www.securityfocus.com/archive/1/423228/100/0/threaded - http://www.securityfocus.com/archive/1/422491/100/0/threaded - http://www.securityfocus.com/archive/1/423204/100/0/threaded - http://www.securityfocus.com/archive/1/422698/100/0/threaded - http://www.securityfocus.com/archive/1/422592/100/0/threaded - http://www.securityfocus.com/archive/1/423432/100/0/threaded
CVE ID: CVE-2006-0370 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22679 - http://www.securityfocus.com/archive/1/422499/100/0/threaded - http://securitytracker.com/id?1015523 - http://secunia.com/advisories/18547 - http://evuln.com/vulns/42/summary.html - http://www.fluffington.com/index.php?page=rcblog - https://exc
visories/18547 - http://evuln.com/vulns/42/summary.html - http://www.fluffington.com/index.php?page=rcblog - https://exchange.xforce.ibmcloud.com/vulnerabilities/24249
CVE ID: CVE-2006-0371 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422499/100/0/threaded - http://www.securityfocus.com/bid/16342 - http://securitytracker.com/id?1015523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24248 - http://ww
d/16342 - http://securitytracker.com/id?1015523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24248 - http://www.osvdb.org/22680 - http://www.securityfocus.com/archive/1/425392/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27042 - http://secunia.com/advisories/18547 - http://evuln.com/vulns/42/summary.html - http://www.securityfocus.com/archive/1/436784/30/4500/threaded - http://www.fluffington.com/index.php?page=rcblog
CVE ID: CVE-2006-0372 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16340 - http://www.securityfocus.com/archive/1/422593/100/0/threaded - http://www.securityfocus.com/archive/1/422484/100/0/threaded - http://www.osvdb.org/22738 - http://securityreason.com/securityalert/365
ityfocus.com/archive/1/422484/100/0/threaded - http://www.osvdb.org/22738 - http://securityreason.com/securityalert/365 - http://www.securityfocus.com/archive/1/422483/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24131
CVE ID: CVE-2006-0373 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27918 - http://www.securityfocus.com/bid/16302
CVE ID: CVE-2006-0374 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB remote debugging ONCRPC (aka wdbrpc) on UDP 17185, (2) reflect network data using echo (TCP 7), or (3) gain access without authentication using rlogin (TCP 513). Additional Analyst Notes: - CVE Program Container: References: - htt
cess without authentication using rlogin (TCP 513). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24149 - http://secunia.com/advisories/18514 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html - http://www.securityfocus.com/bid/16288
CVE ID: CVE-2006-0375 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24149 - http://secunia.com/advisories/18514 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html
4149 - http://secunia.com/advisories/18514 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html - http://www.securityfocus.com/bid/16288
CVE ID: CVE-2006-0376 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place. Additional Analyst Notes: - CVE Program Container: References: - http://www.theta44.org/karma/ - http://securitytracker.com/id?1015489 - http://securityre
ogram Container: References: - http://www.theta44.org/karma/ - http://securitytracker.com/id?1015489 - http://securityreason.com/securityalert/349 - http://www.nmrc.org/pub/advise/20060114.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24157 - http://www.securiteam.com/windowsntfocus/5YP0D2KHHO.html - http://www.securityfocus.com/archive/1/421868/100/0/threaded
CVE ID: CVE-2006-0377 State: PUBLISHED Published: 2006-02-24T00:00:00 Last Updated: 2024-08-07T16:34:14.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:049 - http://www.redhat.com/support/errata/RHSA-2006-0283.html - http://secunia.com/advisories/19176 - http://www.squirrelmail.org/security/issue/2006-02-15 - http://www.redhat.com/
l - http://secunia.com/advisories/19176 - http://www.squirrelmail.org/security/issue/2006-02-15 - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://secunia.com/advisories/20210 - http://www.vupen.com/english/advisories/2006/0689 - http://secunia.com/advisories/18985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11470 - http://secunia.com/advisories/19205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24849 - http://secunia.com/advisories/19960 - http://www.securityfocus.com/bid/16756 - http://secunia.com/advisories/19130 - ftp://patches.sgi.
com/advisories/19960 - http://www.securityfocus.com/bid/16756 - http://secunia.com/advisories/19130 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://www.debian.org/security/2006/dsa-988 - http://secunia.com/advisories/19131 - http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml - http://securitytracker.com/id?1015662
CVE ID: CVE-2006-0378 State: PUBLISHED Published: 2006-01-23T20:00:00 Last Updated: 2024-08-07T16:34:14.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom mp3players_details.php program. NOTE: the name of the affected program might be installation-dependent, but it has been identified as "product_details.php" by some sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0253 - http://secunia.com/advisories/18537 - http:
Container: References: - http://www.vupen.com/english/advisories/2006/0253 - http://secunia.com/advisories/18537 - http://osvdb.org/ref/22/22634-x-site.txt - http://www.osvdb.org/22634 - http://www.securityfocus.com/bid/16313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24234
CVE ID: CVE-2006-0379 State: PUBLISHED Published: 2006-01-25T22:00:00 Last Updated: 2024-08-07T16:34:14.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc - http://secunia.com/advisories/18599 - http://securitytracker.com/id?1015541 - http://www.osvdb.org/22730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24338 - http://www.securityfocus.com/bid/16373
CVE ID: CVE-2006-0380 State: PUBLISHED Published: 2006-01-25T22:00:00 Last Updated: 2024-08-07T16:34:14.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc - http://secunia.com/advisories/18599 - http://securitytracker.com/id?1015541 - http://www.osvdb.org/22731 - https://exchange.xforce.ibmcloud.com/vulnera
8599 - http://securitytracker.com/id?1015541 - http://www.osvdb.org/22731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24340 - http://www.securityfocus.com/bid/16373
CVE ID: CVE-2006-0381 State: PUBLISHED Published: 2006-01-25T22:00:00 Last Updated: 2024-08-07T16:34:14.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16375 - http://securitytracker.com/id?1015542 - http://secunia.com/advisories/18609 - https://exchange.xforce.ibmcloud.com
375 - http://securitytracker.com/id?1015542 - http://secunia.com/advisories/18609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24337 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc - http://www.osvdb.org/22732 - http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc
CVE ID: CVE-2006-0382 State: PUBLISHED Published: 2006-02-14T22:00:00 Last Updated: 2024-08-07T16:34:14.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24682 - http://secunia.com/advisories/18907 - http://www.vupen.com/english/advisories/2006/0597 - http://www.osvdb.org/23190 - http://securitytracker.com/id?1015634 - http://www.securityfocus.com/bid/16654 - http://lists.apple.com/archives/security-announce/2006/Feb/msg00000.html
CVE ID: CVE-2006-0383 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T16:34:14.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving the "incorrect handling of error conditions". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25025 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/M
bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.osvdb.org/23643 - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0384 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T16:34:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or execute arbitrary code via unspecified vectors that cause automount to "mount file systems with reserved names". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23640 - http://securitytracker.com/id?1015709 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/sec
ww.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25021 - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0386 State: PUBLISHED Published: 2006-03-03T22:00:00 Last Updated: 2024-08-07T16:34:14.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19064 - http://www.osvdb.org/23642 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vu
791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25024 - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0387 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:34:14.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/176732 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://securitytracker.com/id?1015713 - http://www.vupen.com/english/advisories/2006/079
w.securityfocus.com/bid/16907 - http://securitytracker.com/id?1015713 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25032 - http://docs.info.apple.com/article.html?artnum=303382