Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4662 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26822 - https://launchpad.net/bugs/173043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36390 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.trustix.org/errata/20
.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.trustix.org/errata/2007/0026/ - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1693 - http://secunia.com/advisories/28249 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://www.ubuntu.com/usn/usn-549-2 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4663 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/ChangeLog-5.php#5.2.4 - https://issues.rpath.com/browse/RPL-1693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36386 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/
erabilities/36386 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4664 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.firebirdsql.org/browse/CORE-1405 - http://www.securityfocus.com/bid/25497 - http://www.vupen.com/english/advisories/2007/3021 - http://secunia.com/advisories/26615 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.
21 - http://secunia.com/advisories/26615 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/36359
CVE ID: CVE-2007-4665 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25497 - http://tracker.firebirdsql.org/browse/CORE-1403 - http://www.vupen.com/english/advisories/2007/3021 - http://secunia.com/advisories/26615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/363
sh/advisories/2007/3021 - http://secunia.com/advisories/26615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36353 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
CVE ID: CVE-2007-4666 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.firebirdsql.org/browse/CORE-1397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36355 - http://www.securityfocus.com/bid/25497 - http://www.vupen.com/english/advisories/2007/3021 - http:
lnerabilities/36355 - http://www.securityfocus.com/bid/25497 - http://www.vupen.com/english/advisories/2007/3021 - http://secunia.com/advisories/26615 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
CVE ID: CVE-2007-4667 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:10.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36356 - http://www.securityfocus.com/bid/25497 - http://www.vupen.com/english/advisories/2007/3021 - http://secunia.com/advisories/26615 - http://tracker.firebirdsql.org/browse/CORE-1149 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advi
firebirdsql.org/browse/CORE-1149 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
CVE ID: CVE-2007-4668 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25497 - http://www.vupen.com/english/advisories/2007/3021 - http://tracker.firebirdsql.org/browse/CORE-1312 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sour
E-1312 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
CVE ID: CVE-2007-4669 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25497 - http://tracker.firebirdsql.org/browse/CORE-1148 - http://www.firebirdsql.org/index.php?op=files&id=engine_202 - http://secunia.com/advisories/29501 - http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://w
http://sourceforge.net/project/shownotes.php?release_id=535898 - http://www.debian.org/security/2008/dsa-1529 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
CVE ID: CVE-2007-4670 State: PUBLISHED Published: 2007-09-05T00:00:00 Last Updated: 2024-08-07T15:01:10.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26822 - https://launchpad.net/bugs/173043 - http://www.redhat.com/support/errata/RHSA-2007-0888.html - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html - http://secunia.com/advisories/26967 - http://secunia.com/advisories/27351 - ht
e-announce/2007-September/msg00354.html - http://secunia.com/advisories/26967 - http://secunia.com/advisories/27351 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/26930 - http://www.trustix.org/errata/2007/0026/ - http://rhn.redhat.com/errata/RHSA-2007-0889.html - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1693 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/27545 - http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://www.man
2/security/ASA-2007-449.htm - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/27102 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26895 - http://www.ubuntu.com/usn/usn-549-2 - http://www.redhat.com/support/errata/RHSA-2007-0890.html - http://www.redhat.com/support/errata/RHSA-2007-0891.html - http://secunia.com/advisories/26871 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11028
CVE ID: CVE-2007-4671 State: PUBLISHED Published: 2007-09-27T22:00:00 Last Updated: 2024-08-07T15:01:09.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://www.secur
ives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://docs.info.apple.com/article.html?artnum=307041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36862 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3868 - http://www.securityfocus.com/bid/25852 - http://www.vupen.com/english/advisories/2007/3287 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-4672 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T15:01:09.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38547 - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38279 - http://docs.info.apple.com/article.html?artnum=306896 - http://www.securityfocus.com/archive/1/483314/100/0/threaded - http://securityreason.com/s
/article.html?artnum=306896 - http://www.securityfocus.com/archive/1/483314/100/0/threaded - http://securityreason.com/securityalert/3350 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - http://www.zerodayinitiative.com/advisories/ZDI-07-068.html - http://www.securitytracker.com/id?1018894 - http://www.securityfocus.com/bid/26344 - http://www.vupen.com/english/advisories/2007/3723
CVE ID: CVE-2007-4673 State: PUBLISHED Published: 2007-10-04T23:00:00 Last Updated: 2024-08-07T15:01:09.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25913 - http://docs.info.apple.com/article.html?artnum=306560 - http://osvdb.org/40434 - http://lists.apple.com/archives/Security-announce/2007/Oct/msg00000.html - https://exc
306560 - http://osvdb.org/40434 - http://lists.apple.com/archives/Security-announce/2007/Oct/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36937
CVE ID: CVE-2007-4674 State: PUBLISHED Published: 2007-11-27T20:00:00 Last Updated: 2024-08-07T15:01:10.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html - http://www.vupen.com/english/advisories/2008/2735 - http://docs.info.apple.com/article.html?artnum=306896 - http://support.apple.com/kb/HT3189 - http://www.securityfocus
- http://docs.info.apple.com/article.html?artnum=306896 - http://support.apple.com/kb/HT3189 - http://www.securityfocus.com/archive/1/483717/100/100/threaded - http://osvdb.org/43716 - http://security.gentoo.org/glsa/glsa-200803-08.xml - http://secunia.com/advisories/32121 - http://www.securityfocus.com/bid/26443 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-20 - http://secunia.com/advisories/29182
CVE ID: CVE-2007-4675 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T15:01:09.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - http://www.securityfocus.com/bid/26342 - http://www.48bits.com/advisories/qt_pdat_heapbof.pdf - http://docs.info.apple.com
tp://www.securityfocus.com/bid/26342 - http://www.48bits.com/advisories/qt_pdat_heapbof.pdf - http://docs.info.apple.com/article.html?artnum=306896 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=620 - http://www.securityfocus.com/archive/1/483564/100/0/threaded - http://www.osvdb.org/38545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38282 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://blog.48bits.com/?p=176 - http://secunia.com/advisories/27523 - http://www.securitytracker.com/id?1018894 - http://www.vupen.com/english/advisories/2007/3723
CVE ID: CVE-2007-4676 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T15:01:10.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-066.html - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - http://docs.info.apple.com/article.html?artnum=306896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
10A.html - http://docs.info.apple.com/article.html?artnum=306896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38280 - http://securityreason.com/securityalert/3351 - http://osvdb.org/38546 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - http://www.kb.cert.org/vuls/id/690515 - http://www.securityfocus.com/archive/1/483311/100/0/threaded - http://www.securityfocus.com/archive/1/483313/100/0/threaded - http://www.securitytracker.com/id?1018894 - http://www.vupen.com/english/advisories/2007/3723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38281 - http://www.securityfocus.com/bid/26345 - http://www.zerodayiniti
://exchange.xforce.ibmcloud.com/vulnerabilities/38281 - http://www.securityfocus.com/bid/26345 - http://www.zerodayinitiative.com/advisories/ZDI-07-067.html
CVE ID: CVE-2007-4677 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T15:01:10.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - http://docs.info.apple.com/article.html?artnum=306896 - http://www.zerodayinitiative.com/advisories/ZDI-07-065.html - http://www.securityfocus.com/bid/26338 - http://www.kb.cert.org/v
www.zerodayinitiative.com/advisories/ZDI-07-065.html - http://www.securityfocus.com/bid/26338 - http://www.kb.cert.org/vuls/id/445083 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - http://www.osvdb.org/38544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38283 - http://www.securityfocus.com/archive/1/483312/100/0/threaded - http://www.securitytracker.com/id?1018894 - http://www.vupen.com/english/advisories/2007/3723 - http://securityreason.com/securityalert/3352
CVE ID: CVE-2007-4678 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T15:01:10.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of service (crash) via a crafted striped disk image, which triggers a NULL pointer dereference when it is mounted. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/
ov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38461
CVE ID: CVE-2007-4679 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T15:01:09.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/2
ple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38462 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4680 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T15:01:09.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate certificates, which allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38463 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041
ists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://docs.info.apple.com/article.html?artnum=307563 - http://secunia.com/advisories/27643 - http://www.vupen.com/english/advisories/2008/0920/references - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4681 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T15:01:10.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted directory hierarchy. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/adv
nounce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38464 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4682 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T15:01:09.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.kb.cert.org/vuls/id/498105 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.h
/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38465 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html