Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5056 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40395 - http://www.securityfocus.com/bid/25768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40396 - http://osvdb.org/4
http://www.securityfocus.com/bid/25768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40396 - http://osvdb.org/40596 - https://www.exploit-db.com/exploits/5098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40389 - http://secunia.com/advisories/28886 - http://www.vupen.com/english/advisories/2007/3261 - http://secunia.com/advisories/26928 - http://osvdb.org/41422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40393 - http://osvdb.org/41426 - http://secunia.com/advisories/28874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36733 - https://www.exploit-db.com/exploits/5090 - http://osvdb.org/41428 - https://www.exploit-db.com/exploits/5097 - http://www.attrition
.exploit-db.com/exploits/5090 - http://osvdb.org/41428 - https://www.exploit-db.com/exploits/5097 - http://www.attrition.org/pipermail/vim/2007-September/001800.html - http://secunia.com/advisories/28873 - https://www.exploit-db.com/exploits/4442 - https://www.exploit-db.com/exploits/5091 - http://secunia.com/advisories/28859 - http://osvdb.org/41427
CVE ID: CVE-2007-5057 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication schemes by spoofing the NetSupport Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/480240/100/0/threaded - http://www.securitytracker.com/id?1018732 - http://securityreason.com/securityalert/3163 - http://www.netsupportsoftware.com/support/td.asp?td=543&Site=nsltd&Lang= - http://secunia.com/advisories/26927 - http://www.securityfocus.com/bid/25761 -
support/td.asp?td=543&Site=nsltd&Lang= - http://secunia.com/advisories/26927 - http://www.securityfocus.com/bid/25761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36726
CVE ID: CVE-2007-5058 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:27.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/480238/100/0/threaded - http://www.vupen.com/english/advisories/2007/3257 - https://exchange.xforce.ibmcloud.com/vuln
/1/480238/100/0/threaded - http://www.vupen.com/english/advisories/2007/3257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36716 - http://securityreason.com/securityalert/3164 - http://osvdb.org/38156 - http://www.barracudanetworks.com/ns/support/tech_alert.php - http://secunia.com/advisories/26937 - http://www.infobyte.com.ar/adv/ISR-15.html - http://www.securityfocus.com/bid/25757 - http://www.securitytracker.com/id?1018733
CVE ID: CVE-2007-5059 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/38165 - http://www.securityfocus.com/archive/1/480278/100/0/threa
Program Container: References: - http://www.osvdb.org/38165 - http://www.securityfocus.com/archive/1/480278/100/0/threaded - http://www.securityfocus.com/bid/25767 - http://www.greensql.net/security - https://exchange.xforce.ibmcloud.com/vulnerabilities/36749 - http://www.osvdb.org/38166
CVE ID: CVE-2007-5060 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:27.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp values. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36755 - http://www.securityfocus.com/bid/25771 - http://www.securityfocus.com/archive/1/480326/100/0/threaded -
bilities/36755 - http://www.securityfocus.com/bid/25771 - http://www.securityfocus.com/archive/1/480326/100/0/threaded - http://secunia.com/advisories/26941
CVE ID: CVE-2007-5061 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25770 - http://osvdb.org/37260 - https://www.exploit-db.com/exploits/4443 - http://www.vupen.com/english/advisories/2007/3249 - http://secunia.com/advisories/26940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36744
CVE ID: CVE-2007-5062 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4435 - http://osvdb.org/41904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36709 - http://www.securityfocus.com/bid/25746
CVE ID: CVE-2007-5063 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request for var/users.txt. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36710 - http://osvdb.org/41903
CVE ID: CVE-2007-5064 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer_Now.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://1v1.name/show-283-1.html - http://www.vupen.com/english/advisories/2007/3309 - http://secunia.com/advisories/26964 - http://osvdb.org/37777 - http://w
p://www.vupen.com/english/advisories/2007/3309 - http://secunia.com/advisories/26964 - http://osvdb.org/37777 - http://www.securityfocus.com/bid/25751
CVE ID: CVE-2007-5065 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36719 - http://www.securityfocus.com/bid/25760 - http://osvdb.org/38157 - https://www.exploit-db.com/exploits/4440
CVE ID: CVE-2007-5066 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36759 - http://www.vupen.com/english/advisories/2007/3243 - http://osvdb.org/40772 - http://secunia.com/advisories/26885 - http://www.securityfocus.com/bid/25773 - http://www.securitytracker.com/id?1018731
CVE ID: CVE-2007-5067 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36756 - http://www.securityfocus.com/bid/25772 - http://secunia.com/advisories/26884 - https://www.exploit-db.com/exploits/4450 - http://www.vupen.com/english/advisories/2007/3258
CVE ID: CVE-2007-5068 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36747 - https://www.exploit-db.com/exploits/4449 - http://www.vupen.com/english/advisories/2007/3254 - http://www.osvdb.org/38164
CVE ID: CVE-2007-5069 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36745 - https://www.exploit-db.com/exploits/4447 - http://secunia.com/advisories/26923 - http://www.securityfocus.com/archive/1/48044
://www.exploit-db.com/exploits/4447 - http://secunia.com/advisories/26923 - http://www.securityfocus.com/archive/1/480441/100/0/threaded - http://www.securityfocus.com/bid/25784
CVE ID: CVE-2007-5070 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36754 - https://www.exploit-db.com/exploits/4445
CVE ID: CVE-2007-5071 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733. NOTE: the vulnerability was also present in a 0.5.1 download available in the early morning of 20070923. NOTE: the original 20070920 disclosure provided an incorrect filename, img_upload_cgi.php. Additional Analyst Notes: - CVE Program Container: References:
sure provided an incorrect filename, img_upload_cgi.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26968 - http://www.securityfocus.com/bid/25747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36785 - http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt - http://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446 - http://www.simplephpblog.com/index.php?m=09&y=07 - http://www.securityfocus.com/archive/1/480569/100/0/threaded - http://www.securityfocus.com/archive/1/480092/100/0/threaded
CVE ID: CVE-2007-5072 State: PUBLISHED Published: 2007-09-24T23:00:00 Last Updated: 2024-08-07T15:17:28.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26968 - http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt - http://www.simplephpbl
nia.com/advisories/26968 - http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt - http://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446 - http://www.simplephpblog.com/index.php?m=09&y=07 - http://www.securityfocus.com/archive/1/480569/100/0/threaded - http://www.securityfocus.com/bid/25802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36783
CVE ID: CVE-2007-5078 State: PUBLISHED Published: 2007-10-05T00:00:00 Last Updated: 2024-08-07T15:17:28.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eGov Manager allow remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied input" to (1) center.exe or (2) Index.exe. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38508 - http://osvdb.org/38507 - http://www.securityfocus.com/archive/1/481210/100/0/threaded - http://www.hackerscenter.com/Archive/view.asp?id=28033 - http://securityreason.com/securityalert/3192 - http://www.securityfocus.com/bid/25881
CVE ID: CVE-2007-5079 State: PUBLISHED Published: 2007-09-25T01:00:00 Last Updated: 2024-08-07T15:17:28.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0657.html - https://bugzilla.redhat.com/show_bug.cgi?id=181302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36791
CVE ID: CVE-2007-5080 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:17:28.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/10252007_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/37434 - http://www.securitytracker.com/id?1018866 - http://www.attrition.org/pipermail/vim/2007
loud.com/vulnerabilities/37434 - http://www.securitytracker.com/id?1018866 - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/ - http://www.kb.cert.org/vuls/id/759385 - http://secunia.com/advisories/27361 - http://www.securityfocus.com/bid/26214
CVE ID: CVE-2007-5081 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:17:28.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/10252007_player/en/ - http://securitytracker.com/id?1018866 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11625 - http://www.attrition.org/pipermail/vim/2007-October/00184
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11625 - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37435 - http://secunia.com/advisories/27361 - http://osvdb.org/38340 - http://www.securityfocus.com/bid/26214
CVE ID: CVE-2007-5082 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:28.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36825 - http://secunia.com/advisories/26914 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 - htt
5 - http://secunia.com/advisories/26914 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 - http://www.securityfocus.com/archive/1/480808/100/0/threaded - http://www.vupen.com/english/advisories/2007/3275 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-16 - http://www.securityfocus.com/bid/25823 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690 - http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp - http://securitytracker.com/id?1018747
CVE ID: CVE-2007-5083 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:28.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26914 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 - http://www.securityfocus.com/archive/1/480808/100/0/threaded - http://www.vupen.com/english/advisories/2007
php?id=601 - http://www.securityfocus.com/archive/1/480808/100/0/threaded - http://www.vupen.com/english/advisories/2007/3275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36827 - http://www.securityfocus.com/bid/25823 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35691 - http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp - http://securitytracker.com/id?1018747
CVE ID: CVE-2007-5084 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:28.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26914 - http://www.securityfocus.com/archive/1/480808/100/0/threaded - http://www.vupen.com/english/advisories/2007/3275
6914 - http://www.securityfocus.com/archive/1/480808/100/0/threaded - http://www.vupen.com/english/advisories/2007/3275 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692 - http://www.securityfocus.com/bid/25823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36828 - http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp - http://securitytracker.com/id?1018747 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
CVE ID: CVE-2007-5085 State: PUBLISHED Published: 2007-09-26T10:00:00 Last Updated: 2024-08-07T15:17:28.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25804 - http://geronimo.apache.org/2007/09/07/mejb-security-alert.html - http://secunia.com/advisories/27464 - http://www-1.ibm.com/support/docview.wss?uid=swg21271586 - http://www.securitytracker.com/id?1018877 - https://issues.ap
http://www-1.ibm.com/support/docview.wss?uid=swg21271586 - http://www.securitytracker.com/id?1018877 - https://issues.apache.org/jira/browse/GERONIMO-3456 - http://secunia.com/advisories/26906 - http://osvdb.org/38661
CVE ID: CVE-2007-5086 State: PUBLISHED Published: 2007-09-26T10:00:00 Last Updated: 2024-08-07T15:17:28.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table (SSDT) and Shadow SSDT function handlers, which allows local users to cause a denial of service (crash) via the (1) NtUserSendInput, (2) LoadLibraryA, (3) NtOpenProcess, (4) NtOpenThread, (5) NtTerminateProcess, (6) NtUserFindWindowEx, and (7) NtUserBuildHwndList kernel SSDT hooks in kylif.sys; the (8) NtDuplicateObject (DuplicateHandle) kernel SSDT hook; and possibly other kernel SSDT h
SSDT hooks in kylif.sys; the (8) NtDuplicateObject (DuplicateHandle) kernel SSDT hook; and possibly other kernel SSDT hooks. NOTE: the NtCreateSection vector is covered by CVE-2007-5043.1. NOTE: the vendor disputes that the DuplicateHandle vector is a vulnerability in their code, stating that "it is not an error in our code, but an obscure method for manipulating standard Windows routines to circumvent our self-defense mechanisms." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3259 - http://osvdb.org/37990 - http://www.rootkit.com/newsread.php?newsid=778 - http://www.kaspersky.com/technews?id=203038706 - http://secunia.com/advi
ttp://www.rootkit.com/newsread.php?newsid=778 - http://www.kaspersky.com/technews?id=203038706 - http://secunia.com/advisories/26887