Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1788 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5371 - http://secunia.com/advisories/29715
CVE ID: CVE-2008-1789 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28643 - https://www.exploit-db.com/exploits/5385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41702
CVE ID: CVE-2008-1790 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29725 - https://www.exploit-db.com/exploits/5402 - http://www.securityfocus.com/bid/28670 - http://www.vupen.com/english/advisories/2008/1137/references - htt
loits/5402 - http://www.securityfocus.com/bid/28670 - http://www.vupen.com/english/advisories/2008/1137/references - http://www.osvdb.org/44327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41751
CVE ID: CVE-2008-1791 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1138/references - http://www.securityfocus.com/bid/28671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41698 - https://www.exploit-db.com/exploits/5401
CVE ID: CVE-2008-1792 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29658 - http://drupal.org/node/241939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41603 - http://www.vupen.com/english/advisories/2008/1082/references - http://www.securityfocus.com/bid/28594
CVE ID: CVE-2008-1793 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41611
ntainer: References: - http://secunia.com/advisories/29623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41611 - http://www.securityfocus.com/bid/28595
CVE ID: CVE-2008-1794 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41617 - http://www.vupen.com/english/advisories/2008/1081/references - http://www.securityfocus.com/bid/28597 - http://drupal.or
http://www.vupen.com/english/advisories/2008/1081/references - http://www.securityfocus.com/bid/28597 - http://drupal.org/node/242053
CVE ID: CVE-2008-1795 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite - htt
Notes: - CVE Program Container: References: - http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite - http://www.securitytracker.com/id?1019710 - http://securityreason.com/securityalert/3810 - http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/ - http://secunia.com/advisories/29543 - http://www.securityfocus.com/archive/1/490096/100/0/threaded - http://www.securityfocus.com/bid/28455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41478
CVE ID: CVE-2008-1796 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200804-29.xml - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41854 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html - http://secunia.com/advisories/29956
CVE ID: CVE-2008-1797 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service (freeze) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490406/100/0/threaded - http://securityreason.com/securityalert/3811 - http://www.securityfocus.com/bid/28600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41620 - http://secunia.com/advisories/29674
CVE ID: CVE-2008-1798 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cal[lng] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41669 - http://www.securityfocus.com/bid/28638 - https://www.exploit-db.com/exploits/5369
CVE ID: CVE-2008-1799 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41672 - https://www.exploit-db.com/exploits/5360
CVE ID: CVE-2008-1800 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) _page_, (3) zone_admin, (4) general_search, and (5) import parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41634
CVE ID: CVE-2008-1801 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:32:01.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31224 - http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD - https://www.exploit-db.com/exploits/5561 - http://secunia.com/advisories/30118 - http://www.ubunt
r2=1.20&pathrev=HEAD - https://www.exploit-db.com/exploits/5561 - http://secunia.com/advisories/30118 - http://www.ubuntu.com/usn/usn-646-1 - http://security.gentoo.org/glsa/glsa-200806-04.xml - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html - http://secunia.com/advisories/30713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42272 - http://www.securitytracker.com/id?1019990 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286 - http://www.debian.org/security/2008/dsa-1573 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html - http://www.redhat.com/support/errata/RHSA-2008-0725.html
t.com/archives/fedora-package-announce/2008-May/msg00244.html - http://www.redhat.com/support/errata/RHSA-2008-0725.html - http://www.vupen.com/english/advisories/2008/2403 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html - http://www.securityfocus.com/bid/29097 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1 - http://secunia.com/advisories/30380 - http://www.vupen.com/english/advisories/2008/1467/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:101 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570 - http://www.redhat.com/support/errata/RHSA-2008-0576.html - http://support.
inition/oval%3Aorg.mitre.oval%3Adef%3A11570 - http://www.redhat.com/support/errata/RHSA-2008-0576.html - http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 - http://www.redhat.com/support/errata/RHSA-2008-0575.html - http://secunia.com/advisories/30248 - http://secunia.com/advisories/31928 - http://secunia.com/advisories/31222
CVE ID: CVE-2008-1802 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:32:01.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30118 - http://www.ubuntu.com/usn/usn-646-1 - http://security.gentoo.org/glsa/glsa-200806-04.xml - http://www.securitytracker.com/id?1019991 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html - htt
www.securitytracker.com/id?1019991 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 - http://secunia.com/advisories/30713 - http://www.debian.org/security/2008/dsa-1573 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42275 - http://www.vupen.com/english/advisories/2008/2403 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html - http://www.securityfocus.com/bid/29097 - http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdp.c?r1=1.101&r2=1.102&pathrev=HEAD - http://sunsolve.
id/29097 - http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdp.c?r1=1.101&r2=1.102&pathrev=HEAD - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1 - http://www.vupen.com/english/advisories/2008/1467/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:101 - http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm - https://www.exploit-db.com/exploits/5585 - http://secunia.com/advisories/30248 - http://secunia.com/advisories/31928
CVE ID: CVE-2008-1803 State: PUBLISHED Published: 2008-05-12T22:00:00 Last Updated: 2024-08-07T08:32:01.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42277 - http://secunia.com/advisories/30118 - http://www.ubuntu.com/usn/usn-646-1 - http://se
mcloud.com/vulnerabilities/42277 - http://secunia.com/advisories/30118 - http://www.ubuntu.com/usn/usn-646-1 - http://security.gentoo.org/glsa/glsa-200806-04.xml - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html - http://secunia.com/advisories/30713 - http://www.debian.org/security/2008/dsa-1573 - http://www.securitytracker.com/id?1019992 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=698 - http://www.vupen.com/english/advisories/2008/2403 - http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html - http://rdesktop.cvs.sourceforge.net/rdes
http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html - http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdesktop.c?r1=1.161&r2=1.162&pathrev=HEAD - http://www.securityfocus.com/bid/29097 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1 - http://www.vupen.com/english/advisories/2008/1467/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9800 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:101 - http://sourceforge.net/mailarchive/message.php?msg_name=20080511065217.GA24455%40cse.unsw.EDU.AU - http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm - http://www.redhat.com/suppor
.GA24455%40cse.unsw.EDU.AU - http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm - http://www.redhat.com/support/errata/RHSA-2008-0575.html - http://secunia.com/advisories/30248 - http://secunia.com/advisories/31928
CVE ID: CVE-2008-1804 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:32:01.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42584 - http://cvs.snort.org/viewcvs.cgi/snort/src/preprocessors/spp_frag3.c.diff?r1=text&tr1=1.46.2.4&r2=text&tr2=1.46.2.5&diff_format=h - https://www.redhat.com/archives/fedora
essors/spp_frag3.c.diff?r1=text&tr1=1.46.2.4&r2=text&tr2=1.46.2.5&diff_format=h - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00156.html - http://securitytracker.com/id?1020081 - http://www.vupen.com/english/advisories/2008/1602 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00167.html - http://secunia.com/advisories/30348 - http://www.ipcop.org/index.php?name=News&file=article&sid=40 - http://www.securityfocus.com/bid/29327 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=701 - http://cvs.snort.org/viewcvs.cgi/snort/ChangeLog?rev=1.534.2.11 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00198.html
cvs.cgi/snort/ChangeLog?rev=1.534.2.11 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00198.html - http://secunia.com/advisories/31204 - http://secunia.com/advisories/30563
CVE ID: CVE-2008-1805 State: PUBLISHED Published: 2008-06-06T22:00:00 Last Updated: 2024-08-07T08:32:01.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020201 - http://secunia.com/advisories/30547 - http://www.vupen.com/english/advisories/2008/1749/references - http://www.securityfocus.com/bid/29553
dvisories/30547 - http://www.vupen.com/english/advisories/2008/1749/references - http://www.securityfocus.com/bid/29553 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711 - http://www.skype.com/security/skype-sb-2008-003.html
CVE ID: CVE-2008-1806 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:32:01.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495497/100/0/threaded - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - https://www.redhat.com/
oo.org/glsa/glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html - http://secunia.com/advisories/33937 - http://www.vupen.com/english/advisories/2008/1876/references - http://secunia.com/advisories/30721 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 - http://www.vupen.com/english/advisories/2008/2525 - http://secunia.com/advisories/31712 - http://secunia.com/advisories/31709 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321 - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 - http://www.vmwa
mitre.oval%3Adef%3A9321 - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://secunia.com/advisories/30740 - http://support.apple.com/kb/HT3438 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715 - http://security.gentoo.org/glsa/glsa-200806-10.xml - http://secunia.com/advisories/30766 - http://secunia.com/advisories/31479 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/2423 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/30967 - http://sunsol
ttp://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/30967 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 - https://issues.rpath.com/browse/RPL-2608 - http://secunia.com/advisories/30821 - http://support.apple.com/kb/HT3026 - http://support.apple.com/kb/HT3129 - http://www.vmware.com/support/player/doc/releasenotes_player.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/31856 - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://secunia.com/advisories/31711 - http://www.redhat.c
http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://secunia.com/advisories/31711 - http://www.redhat.com/support/errata/RHSA-2008-0556.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 - http://www.securityfocus.com/bid/29640 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://www.vupen.com/english/advisories/2008/1794 - http://secunia.com/advisories/31823 - http://www.vupen.com/english/advisories/2008/2558 - http://secunia.com/advisories/30600 - http://support.avaya.com/elmodocs2
://www.vupen.com/english/advisories/2008/2558 - http://secunia.com/advisories/30600 - http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://secunia.com/advisories/31900 - http://secunia.com/advisories/30819 - http://secunia.com/advisories/31707 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html - http://securitytracker.com/id?1020238 - http://www.ubuntu.com/usn/usn-643-1 - http://www.redhat.com/support/errata/RHSA-2008-0558.html - http://secunia.com/advisories/31577 - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2008-1807 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:32:01.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495497/100/0/threaded - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.securityfocus.com/bid/29641 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - https
-25.xml - http://www.securityfocus.com/bid/29641 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767 - http://secunia.com/advisories/33937 - http://www.vupen.com/english/advisories/2008/1876/references - http://secunia.com/advisories/30721 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 - http://securitytracker.com/id?1020239 - http://www.vupen.com/english/advisories/2008/2525 - http://secunia.com/advisories/31712 - http://secunia.com/advisories/31709 - http://sourceforge.net/project/shown