Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Audio Stream messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37255 - http://secunia.com/advisories/27234 - http://osvdb.org/41770 - http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/42881 - http://securityreason.com/securityalert/3272 - http://www.securityfocus.com/archive/1/482478/100/0/threaded - http://www.securityfocus.com/bid/26120
CVE ID: CVE-2007-5639 State: PUBLISHED Published: 2007-10-23T17:00:00 Last Updated: 2024-08-07T15:39:13.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt - http://securityreason.com/securityalert/3273 - http://www.securityfocus.co
P_phone_flooding_denial_of_service_v1.0.txt - http://securityreason.com/securityalert/3273 - http://www.securityfocus.com/archive/1/482480/100/0/threaded - http://www.securityfocus.com/bid/26122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37253 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715
CVE ID: CVE-2007-5640 State: PUBLISHED Published: 2007-10-23T17:00:00 Last Updated: 2024-08-07T15:39:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration. Additional Analyst Notes: - CVE Program Container: References: - http://suppor
ssage is sent after each re-registration. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641 - http://secunia.com/advisories/27234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37254 - http://osvdb.org/41772 - http://securityreason.com/securityalert/3274 - http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt - http://www.securityfocus.com/archive/1/482481/100/0/threaded - http://www.securityfocus.com/bid/26124
CVE ID: CVE-2007-5641 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the full_path parameter to (1) certinfo/index.php, (2) emails/index.php, (3) events/index.php, (4) fax/index.php, (5) files/index.php, (6) files/list.php, (7) groupadm/index.php, (8) history/index.php, (9) info/index.php, (10) log/index.php, (11) mail/index.php, (12) messages/index.php, (13) organizations/index.php, (14) phones/index.php, (15) presence/index.php, (16)
l/index.php, (12) messages/index.php, (13) organizations/index.php, (14) phones/index.php, (15) presence/index.php, (16) projects/index.php, (17) projects/summary.inc.php, (18) projects/list.php, (19) reports/index.php, (20) search/index.php, (21) snf/index.php, (22) syslog/index.php, (23) tasks/searchsimilar.php, (24) tasks/index.php, (25) tasks/summary.inc.php, and (26) useradm/index.php in modules; (27) /ajax/loadsplash.php; (28) /blocks/birthday.php; (29) /blocks/events.php; and (30) /blocks/help.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41914 - http://osvdb.org/41907 - https://www.exploit-db.com/exploits/4549 - http://osvdb.org/41917 - http:/
://osvdb.org/41914 - http://osvdb.org/41907 - https://www.exploit-db.com/exploits/4549 - http://osvdb.org/41917 - http://osvdb.org/41910 - http://osvdb.org/41906 - http://osvdb.org/41957 - http://osvdb.org/41905 - http://osvdb.org/41920 - http://osvdb.org/41975 - http://osvdb.org/41908 - http://osvdb.org/41931 - http://osvdb.org/41918 - http://osvdb.org/41925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37347 - http://osvdb.org/41934 - http://osvdb.org/41927 - http://www.securityfocus.com/bid/26150 - http://osvdb.org/41909 - http://osvdb.org/41928 - http://osvdb.org/41912 - http://secunia.com/advisories/27347 - http://osvdb.org/41913
CVE ID: CVE-2007-5642 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the def_lang parameter to modules/files/list.php; the m_path parameter to (2) modules/projects/summary.inc.php or (3) modules/tasks/summary.inc.php; (4) the module parameter to modules/projects/list.php; or the module parameter to index.php in the (5) certinfo, (6) emails, (7) events, (8) fax, (9) files, (10) groupadm, (11) history, (12) info, (1
to index.php in the (5) certinfo, (6) emails, (7) events, (8) fax, (9) files, (10) groupadm, (11) history, (12) info, (13) log, (14) mail, (15) messages, (16) organizations, (17) phones, (18) presence, (19) projects, (20) reports, (21) search, (22) snf, (23) syslog, (24) tasks, or (25) useradm subdirectory of modules/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4549 - http://osvdb.org/41951 - http://osvdb.org/41954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37348 - http://osvdb.org/41975 - http://osvdb.org/41972 - http://osvdb.org/41955 - http://osvdb.org/41970 - http://osvdb.org/41960 - http://osvdb.org/41956 - http://osv
g/41972 - http://osvdb.org/41955 - http://osvdb.org/41970 - http://osvdb.org/41960 - http://osvdb.org/41956 - http://osvdb.org/41974 - http://osvdb.org/41963 - http://www.securityfocus.com/bid/26148 - http://secunia.com/advisories/27347
CVE ID: CVE-2007-5643 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the CategoryID parameter to ajax/sortcategories.php or (2) an unspecified vector to ajax/sortroles.php. Additional Analyst Notes: - CVE Program Container: References: - http://lussumo.com/swell/168/Vanilla-114-Released/ - http://www.securityfocus.com/bid/26145 - http://www.vupen.com/english/advisories/2007/3571 - http://secunia.com/advisories/27348 - http://lussumo.com/community/discussio
ww.vupen.com/english/advisories/2007/3571 - http://secunia.com/advisories/27348 - http://lussumo.com/community/discussion/7214/vanilla-113-new-remote-blind-sql-injection-exploit-/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/37345 - https://www.exploit-db.com/exploits/4548
CVE ID: CVE-2007-5644 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4548
CVE ID: CVE-2007-5645 State: REJECTED Published: 2007-07-25T23:00:00Z Last Updated: 2024-09-17T01:30:36.954Z Description: No description available.
CVE ID: CVE-2007-5646 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3284 - http://www.securityfocus.com/archive/1/482569/100/0/threaded - https://www.exploit-db.com/exploits/4547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37342 - http://www.securityfocus
www.exploit-db.com/exploits/4547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37342 - http://www.securityfocus.com/bid/26144 - http://www.simplemachines.org/community/index.php?topic=196380.0 - http://www.vupen.com/english/advisories/2007/3568 - http://secunia.com/advisories/27346
CVE ID: CVE-2007-5647 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) art_id or (2) node parameter in an article action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27286 - http://packetstormsecurity.org/0710-exploits/socketkb-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/37394 - http://www.securityfocus.com/bid/26136
CVE ID: CVE-2007-5648 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) d or the (2) u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.lezr.com/exploits/id/84 - http://secunia.com/advisories/27404 - http://www.securityfocus.com/bid/26140 - http://osvdb.org/38204
CVE ID: CVE-2007-5649 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lost_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0710-exploits/socketmail-xss.txt - http://www.securitytracker.com/id?1018855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37382 - http://secunia.com/advisories/27324 - http://www.securityfocus.com/bid/26138
CVE ID: CVE-2007-5650 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37343 - http://www.securityfocus.com/archive/1/482573/100/0/threaded - http://securityreason.com/securityalert/3285 - http://www.securityfocus.com/bid/26143
CVE ID: CVE-2007-5651 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27329 - http://www.securitytracker
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27329 - http://www.securitytracker.com/id?1018842 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288 - http://www.securityfocus.com/bid/26139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37300 - http://www.vupen.com/english/advisories/2007/3566 - http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html
CVE ID: CVE-2007-5652 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is security-related. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www.vupen.com/english/advisories/2007/3538 - http://www.vupen.com/english/advisories
ocview.wss?uid=swg21255607 - http://www.vupen.com/english/advisories/2007/3538 - http://www.vupen.com/english/advisories/2007/3867 - http://www.securityfocus.com/bid/26450 - http://www-1.ibm.com/support/docview.wss?rs=71&uid=swg21283031 - http://www.ibm.com/support/docview.wss?uid=swg1LI72519 - http://secunia.com/advisories/27177
CVE ID: CVE-2007-5653 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll, related to the com_load_type
ng Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll, related to the com_load_typelib function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3590 - https://www.exploit-db.com/exploits/4553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37368 - http://secunia.com/advisories/27280
CVE ID: CVE-2007-5654 State: PUBLISHED Published: 2007-10-23T21:00:00 Last Updated: 2024-08-07T15:39:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.litespeedtech.com/latest/litespeed-web-server-3.2.4-released.html - http://secunia.com/advisories/27302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37380 - http://osvdb.org/41867
ttp://secunia.com/advisories/27302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37380 - http://osvdb.org/41867 - http://www.securityfocus.com/bid/26163 - https://www.exploit-db.com/exploits/4556
CVE ID: CVE-2007-5655 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T15:39:13.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointers. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=639 - http://secunia.com/advisories/28490 - http://www.securityfocus.com/bid/27292 -
nce/vulnerabilities/display.php?id=639 - http://secunia.com/advisories/28490 - http://www.securityfocus.com/bid/27292 - http://securitytracker.com/id?1019193 - http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39705 - http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt - http://www.tibco.com/mk/advisory.jsp - http://www.vupen.com/english/advisories/2008/0173
CVE ID: CVE-2007-5656 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T15:39:13.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt - http://secunia.com/advisories/28490 - http://securitytracker.com/id?1019193 - http://labs.idefense.com/i
_20080115.txt - http://secunia.com/advisories/28490 - http://securitytracker.com/id?1019193 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641 - http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt - http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39708 - http://www.tibco.com/mk/advisory.jsp - http://www.securityfocus.com/bid/27293 - http://www.vupen.com/english/advisories/2008/0173
CVE ID: CVE-2007-5657 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T15:39:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt - http://secunia.com/advisories/28490 - http://securitytracker.com/id?1019193 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=
es/28490 - http://securitytracker.com/id?1019193 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39707 - http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt - http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt - http://www.tibco.com/mk/advisory.jsp - http://www.securityfocus.com/bid/27295 - http://www.vupen.com/english/advisories/2008/0173
CVE ID: CVE-2007-5658 State: PUBLISHED Published: 2008-01-16T02:00:00 Last Updated: 2024-08-07T15:39:13.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39703 - http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt - h
nge.xforce.ibmcloud.com/vulnerabilities/39703 - http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=638 - http://secunia.com/advisories/28490 - http://securitytracker.com/id?1019193 - http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt - http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt - http://www.tibco.com/mk/advisory.jsp - http://www.vupen.com/english/advisories/2008/0173
CVE ID: CVE-2007-5659 State: PUBLISHED Published: 2008-02-12T18:00:00.000Z Last Updated: 2025-10-22T00:05:56.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA08-043A.html - http://www.adobe.com/support/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://lab
om/support/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9813 - http://www.adobe.com/support/security/advisories/apsa08-01.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://secunia.com/advisories/29205 - http://www.redhat.com/support/errata/RHSA-2008-0144.html - http://www.kb.cert.org/vuls/id/666281
CVE ID: CVE-2007-5660 State: PUBLISHED Published: 2007-11-02T16:00:00 Last Updated: 2024-08-07T15:39:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.installshield.com/kb/view.asp?articleid=Q113020 - http://secunia.com/advisories/27475 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 - http://osvd
://secunia.com/advisories/27475 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 - http://osvdb.org/38347 - http://www.vupen.com/english/advisories/2007/3670 - http://www.securitytracker.com/id?1018881 - http://www.macrovision.com/promolanding/7660.htm - http://www.securityfocus.com/bid/26280 - http://support.installshield.com/kb/view.asp?articleid=Q113602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38210
CVE ID: CVE-2007-5661 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T15:39:13.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019735 - http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41558 -
ce/microsites/search.do?cmd=displayKC&externalId=Q113640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41558 - http://www.securityfocus.com/bid/28533 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649 - http://secunia.com/advisories/29549 - http://www.vupen.com/english/advisories/2008/1049