Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0694 State: PUBLISHED Published: 2007-05-30T20:00:00 Last Updated: 2024-08-07T12:26:54.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25438 - http://securityreason.com/securityalert/2739 - http://www.securityfocus.com/bid/24200 - http://www.osvdb.org/34228 - http://www.vupen.com/english/advisories/2007/1981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34537 - http://www.securityfocus.com/archive/1
visories/2007/1981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34537 - http://www.securityfocus.com/archive/1/469829/100/0/threaded - http://www.netvigilance.com/advisory0023
CVE ID: CVE-2007-0695 State: PUBLISHED Published: 2007-02-03T22:00:00 Last Updated: 2024-08-07T12:26:54.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31902 - http://www.vupen.com/english/advisories/2007/0454 - http://www.attrition.org
xforce.ibmcloud.com/vulnerabilities/31902 - http://www.vupen.com/english/advisories/2007/0454 - http://www.attrition.org/pipermail/vim/2007-February/001282.html - http://osvdb.org/33649 - http://sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260
CVE ID: CVE-2007-0696 State: PUBLISHED Published: 2007-02-03T22:00:00 Last Updated: 2024-08-07T12:26:54.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0454 - http://osvdb.org/33650 - http://sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31900
CVE ID: CVE-2007-0697 State: PUBLISHED Published: 2007-02-03T22:00:00 Last Updated: 2024-08-07T12:26:54.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24072 - http://www.securityfocus.com/bid/22279 - http://www.vupen.com/english/advisories/2007/0388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31893 - http://osvdb.org/33115 - https://ww
/advisories/2007/0388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31893 - http://osvdb.org/33115 - https://www.exploit-db.com/exploits/3208
CVE ID: CVE-2007-0698 State: PUBLISHED Published: 2007-02-03T22:00:00 Last Updated: 2024-08-07T12:26:54.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id_mod parameter to templates/modif.html, and other unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32257 - http://www.vupen.com/english/advisories/2007/0388
CVE ID: CVE-2007-0699 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) before 2.5.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32121 - http://www.securityfocus.com/archive/1/458805/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=480538&group_id=178400 - http://www.securityf
5/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=480538&group_id=178400 - http://www.securityfocus.com/bid/22361 - http://www.vupen.com/english/advisories/2007/0457 - http://securityreason.com/securityalert/2223 - http://osvdb.org/33633 - http://www.attrition.org/pipermail/vim/2007-February/001269.html
CVE ID: CVE-2007-0700 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this issue was later reported for 2.5.1.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-February/001280.html - http://www.securityfocus.com/bid/27962 - http://osvdb.org/33634 - http://www.securityfocus.com/archive/1/458805/100/0/threaded - https://exchang
.com/bid/27962 - http://osvdb.org/33634 - http://www.securityfocus.com/archive/1/458805/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32115 - http://www.securityfocus.com/bid/22361 - http://www.attrition.org/pipermail/vim/2007-February/001281.html - https://www.exploit-db.com/exploits/5182 - http://www.attrition.org/pipermail/vim/2007-February/001269.html
CVE ID: CVE-2007-0701 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0459 - http://secunia.com/advisories/24003 - http://www.securityfocus.com/bid/22360 - https://www.exploit-db.com/exploits/3247 - http://osvdb.org/31938 - http://www.attrition.org/pipermail/vim/2007-February/001266.html
CVE ID: CVE-2007-0702 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) Shared/controller/text.ctrl.php or (2) UserMan/controller/common.function.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24000 - http://www.vupen.com/english/advisories/2007/0460 - http://www.attrition.org/pipermail/vim/2007-February/001264.html - https://www.exploit-db.com/exploits/3246 - http://osvdb.org/31937
trition.org/pipermail/vim/2007-February/001264.html - https://www.exploit-db.com/exploits/3246 - http://osvdb.org/31937 - http://osvdb.org/31936 - http://www.securityfocus.com/bid/22358
CVE ID: CVE-2007-0703 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[core][module_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3249 - http://osvdb.org/33607 - http://www.attrition.org/pipermail/vim/2007-February/001267.html - http://www.vupen.com/english/advisories/2007/0458
CVE ID: CVE-2007-0704 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-February/001265.html - http://osvdb.org/33608 - https://www.exploit-db.com/exploits/2329
CVE ID: CVE-2007-0705 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0364 - http://www.fenrir.co.jp/press/20070126_2.html - http://www.ipa.go.jp/security/vuln/documents/2006/JVN_93700808.html - http://jvn.jp/j
nrir.co.jp/press/20070126_2.html - http://www.ipa.go.jp/security/vuln/documents/2006/JVN_93700808.html - http://jvn.jp/jp/JVN%2393700808/index.html - http://osvdb.org/32977 - http://secunia.com/advisories/23927
CVE ID: CVE-2007-0706 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0365 - http://www.fenrir.co.jp/press/20070126_2.html - http://jvn.jp/jp/JVN%2393700808
vupen.com/english/advisories/2007/0365 - http://www.fenrir.co.jp/press/20070126_2.html - http://jvn.jp/jp/JVN%2393700808/index.html
CVE ID: CVE-2007-0707 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33080 - http://secunia.com/advisories/23994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32164 - http://www.gomplayer.com/forum/viewtopic.html?t=221
CVE ID: CVE-2007-0708 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32059 - http://www.securityfocus.com/bid/22357 - http://www.securityfocus.com/a
ange.xforce.ibmcloud.com/vulnerabilities/32059 - http://www.securityfocus.com/bid/22357 - http://www.securityfocus.com/archive/1/458773/100/0/threaded - http://securitytracker.com/id?1017580 - http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
CVE ID: CVE-2007-0709 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:26:54.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32059 - http:/
nalyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32059 - http://www.securityfocus.com/bid/22357 - http://www.securityfocus.com/archive/1/458773/100/0/threaded - http://securitytracker.com/id?1017580 - http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
CVE ID: CVE-2007-0710 State: PUBLISHED Published: 2007-02-16T19:00:00 Last Updated: 2024-08-07T12:26:54.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application crash) via unspecified vectors, possibly related to CVE-2007-0614. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html - http://secunia.com/advisories/24198 - http://www.kb.cert.org/vuls/id/836024 - http://www.securitytracker.com/id?1017661 - http://www.osvdb.org/32713 - http://docs.info.apple.com/article.ht
/836024 - http://www.securitytracker.com/id?1017661 - http://www.osvdb.org/32713 - http://docs.info.apple.com/article.html?artnum=305102 - http://www.securityfocus.com/bid/22304
CVE ID: CVE-2007-0711 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - http://www.kb.cert.org/vuls/id/568689 - http://www.securityfocus.com/bid/22827 - http://osvdb.org/33905 - http://secunia.com/advisories/24359 - http://lists.apple.com/archives/Sec
focus.com/bid/22827 - http://osvdb.org/33905 - http://secunia.com/advisories/24359 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://docs.info.apple.com/article.html?artnum=305149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32814
CVE ID: CVE-2007-0712 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33904 - http://www.vupen.com/english/advisories/2007/0825 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725
9 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32816 - http://docs.info.apple.com/article.html?artnum=305149 - http://www.kb.cert.org/vuls/id/822481
CVE ID: CVE-2007-0713 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - http://www.kb.cert.org/vuls/id/880561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32817 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://lists.apple.com/archiv
ies/32817 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.piotrbania.com/all/adv/quicktime-heap-adv-7.1.txt - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://www.securityfocus.com/archive/1/461983/100/0/threaded - http://docs.info.apple.com/article.html?artnum=305149 - http://www.securityfocus.com/bid/22843
CVE ID: CVE-2007-0714 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom (UDTA) with an Atom size field with a large value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32819 - http://secway.org/advisory/AD20070306.txt - http://osvdb.org/33902 - http://www.zerodayinit
.com/vulnerabilities/32819 - http://secway.org/advisory/AD20070306.txt - http://osvdb.org/33902 - http://www.zerodayinitiative.com/advisories/ZDI-07-010.html - http://www.securityfocus.com/bid/22827 - http://www.securityfocus.com/archive/1/461999/100/0/threaded - http://secunia.com/advisories/24359 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0003.html - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://www.securityfocus.com/archive/1/462153/100/0/threaded - http://docs.info.apple.com/article.html?artnum=305149 - http://www.kb.cert.org/vuls/id/
rchive/1/462153/100/0/threaded - http://docs.info.apple.com/article.html?artnum=305149 - http://www.kb.cert.org/vuls/id/861817 - http://www.securityfocus.com/bid/22844
CVE ID: CVE-2007-0715 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32821 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://osvdb.org/33901 - http://lists.apple.com/archives/Security-announce/2007/
- http://secunia.com/advisories/24359 - http://osvdb.org/33901 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.kb.cert.org/vuls/id/448745 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://docs.info.apple.com/article.html?artnum=305149
CVE ID: CVE-2007-0716 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32822 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://www.kb.cert.org/vuls/id/642433 - http://lists.apple.com/archives/Securit
- http://secunia.com/advisories/24359 - http://www.kb.cert.org/vuls/id/642433 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://osvdb.org/33900 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://docs.info.apple.com/article.html?artnum=305149
CVE ID: CVE-2007-0717 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - http://osvdb.org/33899 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32823 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg000
//exchange.xforce.ibmcloud.com/vulnerabilities/32823 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://www.kb.cert.org/vuls/id/410993 - http://docs.info.apple.com/article.html?artnum=305149
CVE ID: CVE-2007-0718 State: PUBLISHED Published: 2007-03-05T22:00:00 Last Updated: 2024-08-07T12:26:54.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime assumes that a color table exists. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0825 - http://www.kb.cert.org/vuls/id/313225 - http://labs.idefense.com/intelligence/vu
upen.com/english/advisories/2007/0825 - http://www.kb.cert.org/vuls/id/313225 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=486 - http://www.securityfocus.com/bid/22827 - http://secunia.com/advisories/24359 - http://www.securityfocus.com/archive/1/462012/100/0/threaded - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.securitytracker.com/id?1017725 - http://www.us-cert.gov/cas/techalerts/TA07-065A.html - http://www.securityfocus.com/bid/22839 - http://docs.info.apple.com/article.html?artnum=305149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32826
CVE ID: CVE-2007-0719 State: PUBLISHED Published: 2007-03-13T21:00:00 Last Updated: 2024-08-07T12:26:54.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via an image with a crafted ColorSync profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449440 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://www.securityfocus.com/bid/22948 - http://docs.info.apple.com/article.html?artnum=305214 - http://www.s