Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3069 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the config[private] parameter in multiple files, as demonstrated by (1) index.php, (2) faq.php, and (3) hardware.php. NOTE: this issue has been disputed by multiple third-party researchers, who state that config[private] is initialized in an include file before being used Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27436 - http://www.ar
e being used Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27436 - http://www.aria-security.net/advisory/igloo/doublespeak.txt - http://attrition.org/pipermail/vim/2006-July/000935.html - http://www.securityfocus.com/bid/18401 - http://securitytracker.com/id?1016278 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0184.html
CVE ID: CVE-2006-3070 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe extensions, as demonstrated by assigning the txt extension to be handled by application/x-httpd-php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2318 - http://www.securityfocu
otes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2318 - http://www.securityfocus.com/archive/1/437442/30/4320/threaded - http://www.securityfocus.com/bid/18465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27038 - http://securecast.wins21.com/zerovul.html - http://marc.info/?l=full-disclosure&m=115044567831726&w=2 - http://secunia.com/advisories/20592
CVE ID: CVE-2006-3071 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the "search box", and (2) res parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2385 - http://secunia.com/advisories/20664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27234 - http://securityreason.com/securityalert/1112 - http://www.securityfocus.com/archive/1/437
ud.com/vulnerabilities/27234 - http://securityreason.com/securityalert/1112 - http://www.securityfocus.com/archive/1/437283/100/0/threaded - http://www.osvdb.org/26530
CVE ID: CVE-2006-3072 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20647 - http://www.vupen.com/english/advisories/2006/2334 - http://www.securityfocus.com/bid/18420 - http://securitytracker.com/id?1016296 - http://securityresponse.symantec.com/avcenter/security/Content/2006.06.
/18420 - http://securitytracker.com/id?1016296 - http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27105
CVE ID: CVE-2006-3073 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that "WebVPN full-network-access mode" is not affected, despite the claims by the original researcher. Addition
r states that "WebVPN full-network-access mode" is not affected, despite the claims by the original researcher. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436479/30/0/threaded - http://secunia.com/advisories/20644 - http://www.osvdb.org/26454 - http://www.osvdb.org/26453 - http://www.vupen.com/english/advisories/2006/2331 - http://securitytracker.com/id?1016252 - http://www.securityfocus.com/bid/18419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27086 - http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml
CVE ID: CVE-2006-3074 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (r
1) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34875 - http://www.securityfocus.com/bid/18341 - http://www.securitytracker.com/id?1018257 - http://uninformed.org/index.cgi?v=4&a=4&p=4 - http://www.vupen.com/english/advisories/2007/2145 - http://www.securityfocus.com/bid/24491 - http://www.vupen.com/english/advisories/2006/2333 - http://www.kaspersky.com
- http://www.securityfocus.com/bid/24491 - http://www.vupen.com/english/advisories/2006/2333 - http://www.kaspersky.com/technews?id=203038695 - http://secunia.com/advisories/25603 - http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15 - http://www.securityfocus.com/archive/1/471453/100/0/threaded - http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php - http://secunia.com/advisories/20629 - http://uninformed.org/index.cgi?v=4&a=4&p=7 - http://www.rootkit.com/newsread.php?newsid=726
CVE ID: CVE-2006-3075 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including (1) thumstbl.php, (2) wpfiles.php, and (3) wallpapr.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27183 - http://www.securityfocus.com/archive/1/437449/100/100/threaded - http://www.osvdb.
.ibmcloud.com/vulnerabilities/27183 - http://www.securityfocus.com/archive/1/437449/100/100/threaded - http://www.osvdb.org/26502 - http://www.securityfocus.com/bid/18471 - http://www.vupen.com/english/advisories/2006/2352 - http://www.osvdb.org/26500 - http://securitytracker.com/id?1016279 - http://www.osvdb.org/26501 - http://secunia.com/advisories/20656
CVE ID: CVE-2006-3076 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27152 - http://www.securityfocus.com/bid/18440 - http://securityreason.com/securityalert/1109 - http://www.securityfocus.com/archive/1/437130/100/0/threaded
CVE ID: CVE-2006-3077 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.cfm in aXentGuestbook 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27160 - http://pridels0.blogspot.com/2006/06/axentguestbook-ii-xss-vuln.html
CVE ID: CVE-2006-3078 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID parameter in board.php and (2) viewcatmod parameter in main.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20682 - http://www.osvdb.org/26583 - http://www.osvdb.org/26582 - http://www.vupen.com/english/advisories/2006/2401 - http://www.securityfocus.com/bid/18447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27163 - http
s/2006/2401 - http://www.securityfocus.com/bid/18447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27163 - http://securityreason.com/securityalert/1117 - http://www.securityfocus.com/archive/1/437271/100/0/threaded
CVE ID: CVE-2006-3079 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in SSPwiz Plus 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/sspwiz-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27149 - http://www.osvdb.org/26532 - http://www.securityfocus.com/bid/18482 - http://secunia.com/advisories/20698
CVE ID: CVE-2006-3080 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/axentforum-ii-xss-vuln.html - http://www.securityfocus.com/bid/18473 - http://www.securityfocus.com/archive/1/438062/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27136 - http://www.securityfocus.com/archive/1/437403/100/0/threa
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27136 - http://www.securityfocus.com/archive/1/437403/100/0/threaded - http://securitytracker.com/id?1016320 - http://www.vupen.com/english/advisories/2006/2407
CVE ID: CVE-2006-3081 State: PUBLISHED Published: 2006-06-19T18:00:00 Last Updated: 2024-08-07T18:16:05.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27212 - http://secunia.com/advisories/19929 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://seclists.org/lists/fulldisclosure/2006/Jun/0434.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?b
072A.html - http://seclists.org/lists/fulldisclosure/2006/Jun/0434.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913 - http://www.us-cert.gov/cas/techalerts/TA06-208A.html - http://secunia.com/advisories/20832 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://www.securityfocus.com/archive/1/437145 - http://docs.info.apple.com/article.html?artnum=305214 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:111 - http://www.securityfocus.com/archive/1/437277 - http://www.debian.org/security/2006/dsa-1112 - http://www.securityfocus.com/bid/18439 - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/20871 - http
rityfocus.com/bid/18439 - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/20871 - http://www.redhat.com/support/errata/RHSA-2007-0083.html - http://www.securityfocus.com/archive/1/437571/100/0/threaded - https://usn.ubuntu.com/306-1/ - http://bugs.mysql.com/bug.php?id=15828 - http://secunia.com/advisories/24479 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9516
CVE ID: CVE-2006-3082 State: PUBLISHED Published: 2006-06-19T18:00:00 Last Updated: 2024-08-07T18:16:05.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10089 - http://secunia.com/
899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10089 - http://secunia.com/advisories/20968 - http://secunia.com/advisories/20881 - http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157 - http://www.securityfocus.com/archive/1/438751/100/0/threaded - http://secunia.com/advisories/20783 - http://www.debian.org/security/2006/dsa-1107 - http://secunia.com/advisories/20811 - http://www.novell.com/linux/security/advisories/2006_18_sr.html - http://seclists.org/lists/fulldisclosure/2006/May/0782.html - http://secunia.com/advisories/21063 - http://secunia.com/advisories/21135 - http://secunia.com/advisories/20829 - ht
l - http://secunia.com/advisories/21063 - http://secunia.com/advisories/21135 - http://secunia.com/advisories/20829 - http://www.vupen.com/english/advisories/2006/2450 - http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm - http://seclists.org/lists/fulldisclosure/2006/May/0789.html - http://secunia.com/advisories/20801 - http://seclists.org/lists/fulldisclosure/2006/May/0774.html - http://www.securityfocus.com/bid/18554 - https://usn.ubuntu.com/304-1/ - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://www.redhat.com/support/errata/RHSA-2006-0571.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:110 - http://www.debian.org/security/2006
A-2006-0571.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:110 - http://www.debian.org/security/2006/dsa-1115 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.010.html - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - http://secunia.com/advisories/21137 - http://secunia.com/advisories/21143 - http://secunia.com/advisories/21585 - http://securitytracker.com/id?1016519 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.457382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27245
CVE ID: CVE-2006-3083 State: PUBLISHED Published: 2006-08-09T10:00:00 Last Updated: 2024-08-07T18:16:05.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:139 - http://www.kb.cert.org/vuls/id/580124 - http://support
http://www.mandriva.com/security/advisories?name=MDKSA-2006:139 - http://www.kb.cert.org/vuls/id/580124 - http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm - http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt - http://www.osvdb.org/27869 - http://secunia.com/advisories/21847 - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://security.gentoo.org/glsa/glsa-200608-21.xml - http://secunia.com/advisories/21461 - http://secunia.com/advisories/21467 - ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt - http://www.debian.org/security/2006/dsa-1146 - http://www.redhat.com/support/errata/RHSA-2006-0612.html - http://secunia.com/ad
www.debian.org/security/2006/dsa-1146 - http://www.redhat.com/support/errata/RHSA-2006-0612.html - http://secunia.com/advisories/21436 - http://www.vupen.com/english/advisories/2006/3225 - http://secunia.com/advisories/21527 - http://www.osvdb.org/27870 - http://www.pdc.kth.se/heimdal/advisory/2006-08-08/ - http://www.securityfocus.com/archive/1/442599/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515 - http://secunia.com/advisories/21439 - http://secunia.com/advisories/21402 - http://www.securityfocus.com/archive/1/443498/100/100/threaded - http://secunia.com/advisories/21613 - http://www.novell.com/linux/security/advisories/2006_22
/443498/100/100/threaded - http://secunia.com/advisories/21613 - http://www.novell.com/linux/security/advisories/2006_22_sr.html - http://securitytracker.com/id?1016664 - http://secunia.com/advisories/21441 - http://secunia.com/advisories/22291 - http://secunia.com/advisories/21456 - http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml - http://secunia.com/advisories/21423 - http://www.ubuntu.com/usn/usn-334-1 - http://www.securityfocus.com/bid/19427
CVE ID: CVE-2006-3084 State: PUBLISHED Published: 2006-08-09T10:00:00 Last Updated: 2024-08-07T18:16:05.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/cms/node/2376 - http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-
m Container: References: - http://fedoranews.org/cms/node/2376 - http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://www.kb.cert.org/vuls/id/401660 - http://security.gentoo.org/glsa/glsa-200608-21.xml - http://secunia.com/advisories/21461 - http://secunia.com/advisories/21467 - http://www.osvdb.org/27872 - ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt - http://www.debian.org/security/2006/dsa-1146 - http://secunia.com/advisories/21436 - http://www.vupen.com/english/advisories/2006/3225 - http://secunia.com/advisories/21527 - http://www.pdc.kth.se/heimdal/advisory/2006-08-08/ - h
lish/advisories/2006/3225 - http://secunia.com/advisories/21527 - http://www.pdc.kth.se/heimdal/advisory/2006-08-08/ - http://www.securityfocus.com/archive/1/442599/100/0/threaded - http://secunia.com/advisories/23707 - http://secunia.com/advisories/21439 - http://secunia.com/advisories/21402 - http://www.securityfocus.com/archive/1/443498/100/100/threaded - http://secunia.com/advisories/21613 - http://securitytracker.com/id?1016664 - http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml - http://www.osvdb.org/27871 - http://www.ubuntu.com/usn/usn-334-1 - http://www.securityfocus.com/bid/19427
CVE ID: CVE-2006-3085 State: PUBLISHED Published: 2006-06-23T10:00:00 Last Updated: 2024-08-07T18:16:05.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via an SCTP chunk with a 0 length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20703 - http://www.osvdb.org/26680 - http://www.vupen.com/english/advisories/2006/2451 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27384 - http:
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27384 - http://www.securityfocus.com/archive/1/438168/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.trustix.org/errata/2006/0037 - http://securitytracker.com/id?1016347 - http://secunia.com/advisories/20831 - http://secunia.com/advisories/21498 - http://secunia.com/advisories/21045 - http://www.securityfocus.com/bid/18550 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-3086 State: PUBLISHED Published: 2006-06-19T19:00:00 Last Updated: 2024-08-07T18:16:06.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka "Hyperlink COM Object Buffer Overflow Vulnerability." NOTE: this is a different issue than CVE-2006-3059. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/4
CVE-2006-3059. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438057/100/0/threaded - http://www.securityfocus.com/archive/1/438093/100/0/threaded - http://www.securityfocus.com/archive/1/438373/100/0/threaded - http://www.kb.cert.org/vuls/id/394444 - http://www.securityfocus.com/archive/1/438156/100/0/threaded - http://www.securityfocus.com/archive/1/442724/100/0/threaded - http://www.vupen.com/english/advisories/2006/2431 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A999 - http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx - http://www.securityfocus.com/archive/1/438096/100/0/threa
http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx - http://www.securityfocus.com/archive/1/438096/100/0/threaded - http://www.osvdb.org/26666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27224 - http://www.tippingpoint.com/security/advisories/TSRT-06-10.html - http://marc.info/?l=full-disclosure&m=115067840426070&w=2 - http://secunia.com/advisories/20748 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050 - http://www.securityfocus.com/bid/18500 - http://securitytracker.com/id?1016339