Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3526 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:35.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, or (3) the member_id parameter to video_gallery.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4128 - http://osvdb.org/38960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35187 - http://www.securityfocus.com/bid/24726 - http://osvdb.org/38962 -
/exchange.xforce.ibmcloud.com/vulnerabilities/35187 - http://www.securityfocus.com/bid/24726 - http://osvdb.org/38962 - http://osvdb.org/38961
CVE ID: CVE-2007-3527 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:35.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop on zero-length data. Additional Analyst Notes: - CVE Program Container: References: - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.1-ReleaseNotes.pdf - http://osvdb.org/43782 - http://tracker.firebirdsql.org/browse/CORE-1063 - htt
lsnotes/Firebird-2.0.1-ReleaseNotes.pdf - http://osvdb.org/43782 - http://tracker.firebirdsql.org/browse/CORE-1063 - http://secunia.com/advisories/29501 - http://www.securityfocus.com/bid/28473 - http://www.debian.org/security/2008/dsa-1529
CVE ID: CVE-2007-3528 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and (2) direct use of a password for keying, which makes it easier for context-dependent attackers to decrypt files. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/forum/forum.php?forum_id=711619 - http://www.securityfocus.com/bid/24930 - https://sourceforge.net/tracker/index
rge.net/forum/forum.php?forum_id=711619 - http://www.securityfocus.com/bid/24930 - https://sourceforge.net/tracker/index.php?func=detail&aid=1730439&group_id=65612&atid=511612 - http://secunia.com/advisories/25953 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425335 - http://osvdb.org/38189 - https://sourceforge.net/forum/forum.php?forum_id=711620 - http://osvdb.org/38190
CVE ID: CVE-2007-3529 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472661/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35221 - http://osvdb.org/39717 - http://www.exploit-db.com/exploits/4139
CVE ID: CVE-2007-3530 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39718 - http://www.securityfocus.com/archive/1/472661/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35222 - http://www.exploit-db.com/exploits/4139
CVE ID: CVE-2007-3531 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:21:36.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26200 - http://secunia.com/advisories/26208 - http://osvdb.org/38573 - http://bugs.gentoo.org/show_bug.cgi?id=184071 - http://security.gentoo.org/glsa/glsa-200707-08.xml - http://www.securityfocus.com/bid/25052 - https://exchange.xforce.ibmcloud.co
curity.gentoo.org/glsa/glsa-200707-08.xml - http://www.securityfocus.com/bid/25052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35584
CVE ID: CVE-2007-3532 State: PUBLISHED Published: 2007-07-27T22:00:00 Last Updated: 2024-08-07T14:21:36.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia* device files with insecure permissions, which allows local users to modify video card settings, cause a denial of service (crash or physical video card damage), and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200708-14.xml - http://osvdb.org/40177 - http://www.securityfocus.com/bid/2
http://www.gentoo.org/security/en/glsa/glsa-200708-14.xml - http://osvdb.org/40177 - http://www.securityfocus.com/bid/25360 - https://bugs.gentoo.org/show_bug.cgi?id=183567 - http://www.securityfocus.com/bid/25363 - http://secunia.com/advisories/26497
CVE ID: CVE-2007-3533 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and reporting outage) via a loopback packet with zero in the length field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35172 - http://support.3com.com/infodeli/tools/nj/nj220_02_00_23_readme.pdf - http://www.vupen.com/english/advisories/2007/2386 - http://www.securityfocus.com/bid/24705 - http://secunia.com/advisories/2588
www.vupen.com/english/advisories/2007/2386 - http://www.securityfocus.com/bid/24705 - http://secunia.com/advisories/25883
CVE ID: CVE-2007-3534 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via the rid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25892 - https://www.exploit-db.com/exploits/4125 - http://www.securityfocus.com/bid/24701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35161 - http://osvdb.org/36295
CVE ID: CVE-2007-3535 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) FORUM_LANGUAGE parameter to functions.php or the (2) style parameter to bottom.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35160 - https://www.exploit-db.com/exploits/4124 - http://osvdb.org/37111 - http://osvdb.org/37110
CVE ID: CVE-2007-3536 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long (1) Host, (2) Password, or (3) LogFile property values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35155 - http://www.securityfocus.com/bid/24703 - http://osvdb.org/37672 - https://www.exploit-db.com/exploits/4123 - http://secunia.com/advisories/25891 - http://www.vupen.com/english/advisories/2007/238
ww.exploit-db.com/exploits/4123 - http://secunia.com/advisories/25891 - http://www.vupen.com/english/advisories/2007/2387
CVE ID: CVE-2007-3537 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25885 - http://osvdb.org/37792 - http://www-1.ibm.com/support/docview.wss?uid=nas2742405285431729b86256e620067dc17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35173 - http://www.securityfocus.com/bid/24706
CVE ID: CVE-2007-3538 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in qtg_msg_view.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35101 - http://osvdb.org/38938 - http://pridels-team.blogspot.com/2007/06/quicktalk-guestbook-sql-inj.html - http://www.securityfocus.com/bid/24667
CVE ID: CVE-2007-3539 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) t and (2) f parameters in (a) qti_ind_post.php and (b) qti_ind_post_prt.php; (3) dir and (4) order parameters in qti_ind_member.php; (5) id parameter in qti_usr.php; and the (6) f parameter in qti_ind_topic.php. NOTE: it was later reported that vector 5 also affects 1.4, 1.5, and 1.5.0.3. Additional Analyst Notes: - CVE Program Container: References: - http://secu
ector 5 also affects 1.4, 1.5, and 1.5.0.3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35100 - http://osvdb.org/38957 - http://pridels-team.blogspot.com/2007/06/quickticket-multiple-sql-inj.html - http://osvdb.org/42684 - https://www.exploit-db.com/exploits/5222 - http://osvdb.org/37606 - http://www.vupen.com/english/advisories/2007/2367 - http://www.securityfocus.com/bid/28176 - http://osvdb.org/38958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41065 - http://osvdb.org/38959 - http://osvdb.org/38956
CVE ID: CVE-2007-3540 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) show, (3) searchtype, (4) catid, and (5) searchtxt parameters, a different version and vectors than CVE-2005-4060. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24668 - http://secunia.com/advisories/25849 - http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html - http://osvdb.org/36347 - http
/advisories/25849 - http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html - http://osvdb.org/36347 - http://www.vupen.com/english/advisories/2007/2368
CVE ID: CVE-2007-3541 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25835 - http://www.vupen.com/english/advisories/2007/2352 - http://osvdb.org/36348 - http://www.securityfocus.com/bid/24683 - http://jvn.jp/jp/JVN%2374063879/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35111 - http://www.kurinton.net/~snca/shttpd
374063879/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35111 - http://www.kurinton.net/~snca/shttpdass.shtml
CVE ID: CVE-2007-3542 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35015 - https://www.exploit-db.com/exploits/4096 - http://osvdb.org/38890
CVE ID: CVE-2007-3543 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata field; and then sending this file's content, along with its post_ID value, to (1) wp-app.php or (2) app.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25794 - http://www.securityfocus.com/bid/24642 - http://osvdb.org/37295 - ht
References: - http://secunia.com/advisories/25794 - http://www.securityfocus.com/bid/24642 - http://osvdb.org/37295 - http://www.buayacorp.com/files/wordpress/wordpress-advisory.html - http://trac.mu.wordpress.org/changeset/1005
CVE ID: CVE-2007-3544 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, possibly related to the wp_postmeta table and the use of custom fields in normal (non-attachment) posts. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-3543. Additional Analyst Notes: - CVE Program Container: References: - http://www.buayacorp.com/files/wordpress/wordpress-advisory.html
l Analyst Notes: - CVE Program Container: References: - http://www.buayacorp.com/files/wordpress/wordpress-advisory.html - http://osvdb.org/37294
CVE ID: CVE-2007-3545 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename when setting background music. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24650 - http://svn.gna.org/viewcvs/warzone/tags/2.0.7/ChangeLog?view=markup - http://osvdb.org/36721
CVE ID: CVE-2007-3546 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37011 - http://www.vupen.com/english/advisories/2007/2362 - http://www.securitytracker.com/id?1018318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35118 - http://secunia.com/advisories/25856 - http://www.nessus.org/news/ - http://www.securityfocus
com/vulnerabilities/35118 - http://secunia.com/advisories/25856 - http://www.nessus.org/news/ - http://www.securityfocus.com/bid/24677
CVE ID: CVE-2007-3547 State: PUBLISHED Published: 2007-07-03T20:00:00 Last Updated: 2024-08-07T14:21:36.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24670 - http://osvdb.org/37605 - http://secunia.com/advisories/25852/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35115 - https://www.exploit-db.com/exploits/4116
CVE ID: CVE-2007-3548 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or crash) and possibly execute arbitrary code by sending a large banner to a client that is sending a file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35184 - http://www.securityfocus.com/bid/24709 - http://osvdb.org/45745 - https://www.exploit-db.com/exploits/4126
CVE ID: CVE-2007-3549 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35176 - http://www.securityfocus.com/bid/24711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35187 - https://www.exploit-db.com/exploits/4127 - http://osvdb.org/38936
CVE ID: CVE-2007-3550 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results in a denial of service (website suppression and resource consumption), aka "Internet Explorer Zone Domain Specification Dos and Page Suppressing". NOTE: this issue has been disputed by a third party, who states that the zone settings cannot be manipulated Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45814 - https://
cannot be manipulated Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35455 - http://www.securityfocus.com/archive/1/485536/100/0/threaded - http://www.securityfocus.com/bid/24744 - http://securityreason.com/securityalert/2855 - http://www.securityfocus.com/archive/1/472651/100/0/threaded - http://www.securityfocus.com/archive/1/473662 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064326.html - http://www.secniche.org/advisory/Internet_Dos_Adv.pdf
CVE ID: CVE-2007-3551 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to login as the Guest user when another Guest user is already logged in, possibly related to the state_login_prompt function in state_login.c. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37805 - http://www.securityfocus.com/bid/24747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35244 - http://secunia.com/advisories/25924 - http://www.ka.sara.nl/home/walter//bbs100/Chang
mcloud.com/vulnerabilities/35244 - http://secunia.com/advisories/25924 - http://www.ka.sara.nl/home/walter//bbs100/ChangeLog.txt
CVE ID: CVE-2007-3552 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving certain v*printf and shift_StringIO functions. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35245 - http://www.securityfocus.com/bid/24747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35242 - http://osvdb.org/37807 - http://
urityfocus.com/bid/24747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35242 - http://osvdb.org/37807 - http://secunia.com/advisories/25924 - http://osvdb.org/37806 - http://www.ka.sara.nl/home/walter//bbs100/ChangeLog.txt
CVE ID: CVE-2007-3553 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using (1) pls/ and (2) pls/MSBEP004/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
am Container: References: - http://secunia.com/advisories/25919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35266 - http://www.securityfocus.com/bid/24697 - http://osvdb.org/37058 - http://www.securitytracker.com/id?1018329
CVE ID: CVE-2007-3554 State: PUBLISHED Published: 2007-07-04T15:00:00 Last Updated: 2024-08-07T14:21:36.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argument to the queryHub function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2413 - http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1183360239.ff.php&page=last - https://exchange.xforce.ibmcloud.com/vulnerabilities/35228 - h
loits&argument=Remote&topic=1183360239.ff.php&page=last - https://exchange.xforce.ibmcloud.com/vulnerabilities/35228 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01077597 - http://osvdb.org/37832 - http://www.securityfocus.com/archive/1/472728/100/0/threaded - http://www.securitytracker.com/id?1018331 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01077597 - http://secunia.com/advisories/25918 - http://www.securityfocus.com/bid/24730