Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3595 State: PUBLISHED Published: 2008-08-12T17:00:00 Last Updated: 2024-08-07T09:45:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFG[txtsql][class] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44377 - https://www.exploit-db.com/exploits/6224 - http://www.securityfocus.com/bid/30625
CVE ID: CVE-2008-3596 State: PUBLISHED Published: 2008-08-12T17:00:00 Last Updated: 2024-08-07T09:45:18.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=2040255&group_id=82171&atid=1098812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44394 - http://secunia.com/advisories/31406 - http://www.securityfocus.com/bid/3063
.xforce.ibmcloud.com/vulnerabilities/44394 - http://secunia.com/advisories/31406 - http://www.securityfocus.com/bid/30637
CVE ID: CVE-2008-3597 State: PUBLISHED Published: 2008-08-12T17:00:00 Last Updated: 2024-08-07T09:45:18.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a "command 29" packet when the player is not in the game. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44363 - http://www.vupen.com/english/advisories/2008/2325 - http://aluigi.altervista.org/adv/skulltagod-adv.txt - http://skulltag.com/forum/viewtopic.php?f=1&t=14716
CVE ID: CVE-2008-3598 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25041/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44367 - http://osvdb.org/35500 - http://securityreason.com/securityalert/4140 - https://www.exploit-db.com/exploits/6226 - http://www.securityfocus.com/bid/30629
CVE ID: CVE-2008-3599 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44361 - http://www.securityfocus.com/bid/30631 - https://www.exploit-db.com/exploits/6228 - http://securityreason.com/securityalert/4141 - http://secunia.com/advisories/31408
CVE ID: CVE-2008-3600 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter within a modload action. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-02.xml - http://gallery.menalto.com/gallery_1.5.8_released - http://secunia.com/advisories/32662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4437
gallery_1.5.8_released - http://secunia.com/advisories/32662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44373 - http://securityreason.com/securityalert/4142 - http://www.securityfocus.com/archive/1/495284/100/0/threaded - https://www.exploit-db.com/exploits/6222
CVE ID: CVE-2008-3601 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forums array parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30623 - http://securityreason.com/securityalert/4144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44366 - https://www.exploit-db.com/exploits/6223 - http://secunia.com/advisories/31419
CVE ID: CVE-2008-3602 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30624 - https://www.exploit-db.com/exploits/6225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44379 - http://securityreason.com/securityalert/4143
CVE ID: CVE-2008-3603 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44375 - http://secunia.com/advisories/31421 - https://www.exploit-db.com/exploits/6221
CVE ID: CVE-2008-3604 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44362 - https://www.exploit-db.com/exploits/6230 - http://secunia.com/advisories/31413 - http://securityreason.com/securityalert/4145
CVE ID: CVE-2008-3605 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2324 - http://www.mcafee.com/apps/downloads/security_updates/hotfixes.asp?region=us&segment=enterprise - http://secunia.com/advisories/31433 - http://www.securitytracker.com/id?1020648 - https://exchange.xforce.ibmcloud
ise - http://secunia.com/advisories/31433 - http://www.securitytracker.com/id?1020648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44368 - http://www.securityfocus.com/bid/30630
CVE ID: CVE-2008-3606 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30606 - http://www.securitytracker.com/id?1020644 - http://secunia.com/advisories/31442 - http://securityreason.com/
bid/30606 - http://www.securitytracker.com/id?1020644 - http://secunia.com/advisories/31442 - http://securityreason.com/securityalert/4146 - http://www.securityfocus.com/archive/1/495264/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44370
CVE ID: CVE-2008-3607 State: PUBLISHED Published: 2008-08-12T19:00:00 Last Updated: 2024-08-07T09:45:18.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44378 - http://www.securityfocus.com/archive/1/495259/100/0/threaded - http://www.securityfocus.com/bid/30605 - http://securityreason.com/securityalert/4147
CVE ID: CVE-2008-3608 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45168 - http://lists.apple.com/archives/security-ann
sg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45168 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://www.vupen.com/english/advisories/2008/3107 - http://secunia.com/advisories/31882 - http://www.securitytracker.com/id?1020876 - http://secunia.com/advisories/32706 - http://support.apple.com/kb/HT3298 - http://support.apple.com/kb/HT3276
CVE ID: CVE-2008-3609 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://www.securitytracker.com/id?1020877 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/engli
ity-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45169
CVE ID: CVE-2008-3610 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account from the user list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45170 - http://lists.apple.com/archives/security-announce
d/31189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45170 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://securitytracker.com/id?1020878 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882
CVE ID: CVE-2008-3611 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic, physically proximate attackers to bypass authentication and change this user's password by later entering an acceptable new password on the same login screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert
rityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://securitytracker.com/id?1020878 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45171
CVE ID: CVE-2008-3612 State: PUBLISHED Published: 2008-09-10T16:00:00 Last Updated: 2024-08-07T09:45:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020848 - http://www.vupen.com/english/advisories/2008/2525 - http://support.apple.com/kb/HT3026 - http://support.apple.com/kb/HT3129 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html - http://secuni
/support.apple.com/kb/HT3129 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html - http://secunia.com/advisories/31823 - http://www.vupen.com/english/advisories/2008/2558 - http://secunia.com/advisories/31900 - http://www.securityfocus.com/bid/31092 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html
CVE ID: CVE-2008-3613 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving a search for a remote disk on the local network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://securitytracker.
.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://securitytracker.com/id?1020875 - http://secunia.com/advisories/31882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45166
CVE ID: CVE-2008-3614 State: PUBLISHED Published: 2008-09-10T16:00:00 Last Updated: 2024-08-07T09:45:18.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31086 - http://www.vupen.com/english/advisories/2008/2527 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http:
ity-announce//2008/Sep/msg00000.html - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://securitytracker.com/id?1020841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15851 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://support.apple.com/kb/HT3137 - http://secunia.com/advisories/31882 - http://www.securitytracker.com/id?1020879 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744 - http://support.apple.com/kb/HT3027 - http://secunia.com/advisories/31821
CVE ID: CVE-2008-3615 State: PUBLISHED Published: 2008-09-10T16:00:00 Last Updated: 2024-08-07T09:45:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31086 - http://www.vupen.com/english/advisories/2008/2527 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html - http://s
.com/english/advisories/2008/2527 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html - http://securitytracker.com/id?1020841 - http://www.ngssoftware.com/advisories/critical-vulnerability-in-apple-quicktimes-indeo-codec/ - http://support.apple.com/kb/HT3027 - http://secunia.com/advisories/31821 - http://www.securityfocus.com/archive/1/496358/100/0/threaded
CVE ID: CVE-2008-3616 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via vectors associated with "passing untrusted input" to unspecified API functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45172
ple.com/archives/security-announce//2008/Sep/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45172 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://securitytracker.com/id?1020880 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882
CVE ID: CVE-2008-3617 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http
ple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45174 - http://securitytracker.com/id?1020882
CVE ID: CVE-2008-3618 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:19.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing was unintended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://www.kb.cert.org/vuls/id/126787 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
1189 - http://www.kb.cert.org/vuls/id/126787 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://securitytracker.com/id?1020883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45175
CVE ID: CVE-2008-3619 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45176 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/
erabilities/45176 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020884
CVE ID: CVE-2008-3621 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45177 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http
ple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020885
CVE ID: CVE-2008-3622 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T09:45:18.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/
2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45178
CVE ID: CVE-2008-3623 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T09:45:18.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.vupen.com/eng