Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g/security/2008/dsa-1557 - http://secunia.com/advisories/32834 - http://secunia.com/advisories/29964 - http://secunia.com/advisories/30816 - http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html - http://secunia.com/advisories/29613 - http://secunia.com/advisories/29588 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2 - http://secunia.com/advisories/33822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41541 - http://www.vupen.com/english/advisories/2008/1037/refe
22 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41541 - http://www.vupen.com/english/advisories/2008/1037/references - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:131
CVE ID: CVE-2008-1568 State: PUBLISHED Published: 2008-03-31T22:00:00 Last Updated: 2024-08-07T08:24:42.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200804-29.xml - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=462840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41554 - http://secunia.com/ad
rg/cgi-bin/bugreport.cgi?bug=462840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41554 - http://secunia.com/advisories/29731 - http://www.securityfocus.com/bid/28547 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html - http://secunia.com/advisories/29956 - http://secunia.com/advisories/29621
CVE ID: CVE-2008-1569 State: PUBLISHED Published: 2008-03-31T22:00:00 Last Updated: 2024-08-07T08:24:42.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28480 - http://www.policyd-weight.org/ - http://secunia.com/advisories/29738 - http://security.gentoo.org/glsa/glsa-200804-11.xml - http://secunia.com/advisories/29553 - http://www.osvdb.org/43888 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41565 -
secunia.com/advisories/29553 - http://www.osvdb.org/43888 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41565 - http://www.debian.org/security/2008/dsa-1531 - https://bugs.gentoo.org/show_bug.cgi?id=214403
CVE ID: CVE-2008-1570 State: PUBLISHED Published: 2008-03-31T22:00:00 Last Updated: 2024-08-07T08:24:42.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41570 - http://secunia.com/advisories/29738 - http://security.gentoo.org/glsa/glsa-200804-11.xml - http://www.osvdb.org/43888 - h
ttp://secunia.com/advisories/29738 - http://security.gentoo.org/glsa/glsa-200804-11.xml - http://www.osvdb.org/43888 - https://bugs.gentoo.org/show_bug.cgi?id=214403
CVE ID: CVE-2008-1571 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020141 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42718 - http://www.securityfocus.com/bid/29501 - http://secunia.com/advisories/30430 - http://lists.apple.com/archive
es/42718 - http://www.securityfocus.com/bid/29501 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1572 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized by this application. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42719 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.htm
0A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29521 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1573 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or (2) GIF image, which causes an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30775 - http://www.vupen.com/english/advisories/2008/1882/references - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-a
ert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.com/id?1020144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42721 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29513 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1574 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29514 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.co
advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.com/id?1020144 - http://www.vupen.com/english/advisories/2008/1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42722 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1575 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42707 - http://www.securityfocus.com/bid/29492 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 -
urityfocus.com/bid/29492 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.com/id?1020133 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1576 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly initialize memory, which might allow remote attackers to execute arbitrary code or cause a denial of service (application crash), or obtain sensitive information (memory contents) in opportunistic circumstances, by sending an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42723 - http://www.securityfocus.com/bid/29500 - http://www.us-cert.gov/cas/techaler
xforce.ibmcloud.com/vulnerabilities/42723 - http://www.securityfocus.com/bid/29500 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.com/id?1020140 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1577 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file, related to "multiple memory corruption issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42706 - http://securitytracker.com/id?1020132 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html
com/vulnerabilities/42706 - http://securitytracker.com/id?1020132 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1578 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29520 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.secu
archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412 - http://securitytracker.com/id?1020142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42725
CVE ID: CVE-2008-1579 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://securitytracker.com/id?1020143 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - https://exchang
archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42727 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1580 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:24:42.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information (Subject data) from personally identifiable certificates, and use arbitrary certificates to track user activities across domains, a related issue to CVE-2007-4879. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020134 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html
am Container: References: - http://securitytracker.com/id?1020134 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://www.securityfocus.com/bid/29493 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42708 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1581 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:24:42.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493225/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA08-162C.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42943 - http://www.securitytracker.com/id?1020213 - http://list
l - https://exchange.xforce.ibmcloud.com/vulnerabilities/42943 - http://www.securitytracker.com/id?1020213 - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293 - http://www.vupen.com/english/advisories/2008/1776/references - http://secunia.com/secunia_research/2008-9/advisory/ - http://www.securityfocus.com/bid/29619 - http://www.securityfocus.com/bid/29649 - http://support.apple.com/kb/HT1991
CVE ID: CVE-2008-1582 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:24:42.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-162C.html - http://www.securityfocus.com/bid/29654 - http://www.securitytracker.com/id?1020214 - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293
1020214 - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293 - http://www.vupen.com/english/advisories/2008/1776/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42944 - http://www.securityfocus.com/bid/29619 - http://support.apple.com/kb/HT1991
CVE ID: CVE-2008-1583 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:24:42.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-162C.html - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293 - http://www.securityfocus.com/bid/29648 - http://www.vupen.com/english/adv
0.html - http://secunia.com/advisories/29293 - http://www.securityfocus.com/bid/29648 - http://www.vupen.com/english/advisories/2008/1776/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42945 - http://www.securityfocus.com/bid/29619 - http://support.apple.com/kb/HT1991 - http://www.securitytracker.com/id?1020215
CVE ID: CVE-2008-1584 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:24:43.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493247/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA08-162C.html - http://www.securitytracker.com/id?1020216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42947 - http://lists.apple.com/archives
itytracker.com/id?1020216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42947 - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293 - http://www.securityfocus.com/bid/29652 - http://www.vupen.com/english/advisories/2008/1776/references - http://www.zerodayinitiative.com/advisories/ZDI-08-037/ - http://www.securityfocus.com/bid/29619 - http://support.apple.com/kb/HT1991
CVE ID: CVE-2008-1585 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:24:42.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-038/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42948 - http://www.securityfocus.com/bid/29650 - ht
s/ZDI-08-038/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42948 - http://www.securityfocus.com/bid/29650 - http://www.vupen.com/english/advisories/2008/2064/references - http://www.us-cert.gov/cas/techalerts/TA08-162C.html - http://secunia.com/advisories/31034 - http://www.securityfocus.com/archive/1/493248/100/0/threaded - http://www.securitytracker.com/id?1020217 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html - http://secunia.com/advisories/29293 - http://www.vupen.com/english/advisories/2008/1776/references - http://www.kb.cert.org/vuls/id/132419 - http://www.securityfocus.co
.vupen.com/english/advisories/2008/1776/references - http://www.kb.cert.org/vuls/id/132419 - http://www.securityfocus.com/bid/29619 - http://support.apple.com/kb/HT1991
CVE ID: CVE-2008-1586 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T08:24:42.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securitytracker.com/id?1021270 - http://support.
nsuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securitytracker.com/id?1021270 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://secunia.com/advisories/32756 - http://osvdb.org/50023
CVE ID: CVE-2008-1588 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:24:42.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/30186 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/35379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43732 - http://lists.apple.com/archives/security-announc
es/35379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43732 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.vupen.com/english/advisories/2008/2094/references - http://support.apple.com/kb/HT3613 - http://secunia.com/advisories/31074
CVE ID: CVE-2008-1589 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:24:42.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43734 - http://www.securityfocus.com/bid/30186 - http://jvn.jp/en/jp/JVN88676089/index.html - http://lists.apple.com/archives/security-announce/2008//Jul/msg0000
30186 - http://jvn.jp/en/jp/JVN88676089/index.html - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.vupen.com/english/advisories/2008/2094/references - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html - http://secunia.com/advisories/31074
CVE ID: CVE-2008-1590 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:24:42.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43738 - http://lists.apple.com/arc
ww.securityfocus.com/bid/30186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43738 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.vupen.com/english/advisories/2008/2094/references - http://secunia.com/advisories/31074