Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5531 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityale
tainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5532 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http:/
nalyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5533 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.c
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5534 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.
CVE ID: CVE-2008-5535 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4
CVE ID: CVE-2008-5536 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/47
r: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5537 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5538 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5539 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://secur
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5540 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securit
otes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5541 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4
CVE ID: CVE-2008-5542 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityre
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5543 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityaler
CVE ID: CVE-2008-5544 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://se
yst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5545 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://sec
st Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5546 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityaler
CVE ID: CVE-2008-5547 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://se
CVE ID: CVE-2008-5548 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 - http://securityreason.com/securityalert/4723 - http://www.securityfocus.com/archive/1/499043/100/0/threaded - http://www.securityfocus.com/archive/1/498995/100/0/threaded
CVE ID: CVE-2008-5549 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47256 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 - http://www.vupen.com/english/advisories/2008/3408 - http:
unsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 - http://www.vupen.com/english/advisories/2008/3408 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1 - http://secunia.com/advisories/33120 - http://www.securityfocus.com/bid/32770 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1 - http://securitytracker.com/id?1021380
CVE ID: CVE-2008-5550 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243786-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125952-18-1 - ht
search/document.do?assetkey=1-21-136987-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125952-18-1 - http://www.securityfocus.com/bid/32771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47257 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125950-18-1
CVE ID: CVE-2008-5551 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32780 - http://securityreason.com/securityalert/4724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.security
securityreason.com/securityalert/4724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5552 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47441 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5553 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/
" Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47442 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5554 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario." Additional Analyst Notes: - CVE Program Container: References: - htt
to "address every conceivable XSS attack scenario." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5555 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:47.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario." Additional Analyst Notes: - C
Filter intentionally does not attempt to "address every conceivable XSS attack scenario." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5556 State: PUBLISHED Published: 2008-12-12T18:13:00 Last Updated: 2024-08-07T10:56:46.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.securityfocus.com/archive
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 - http://www.securityfocus.com/archive/1/499124/100/0/threaded
CVE ID: CVE-2008-5557 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T10:56:47.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125631037611762&w=2