Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6108 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22925 - http://securitytracker.com/id?1017277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30526 - http://jvn.jp/jp/JVN%2361543834/index.html - http://www.securityfocus.com/bid/21146/info - http://www.vupen.com/english/advisories/2006/4583
CVE ID: CVE-2006-6109 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) policy parameter in openPolicy.asp or the (2) brand parameter in prodList.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30346 - http://www.securityfocus.com/bid/21090/info - http://secunia.com/advisories/22954 - http://marc.info/?l=bugtraq&m=116372253323469&w=2 - http://www.vupen.com/english/advisories/2006/4577 - ht
ories/22954 - http://marc.info/?l=bugtraq&m=116372253323469&w=2 - http://www.vupen.com/english/advisories/2006/4577 - http://s-a-p.ca/index.php?page=OurAdvisories&id=25
CVE ID: CVE-2006-6110 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the (1) vjob parameter in publications_list.asp or (2) InfoID parameter in publication_view.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451537/100/100/threaded - http://securityreason.com/securityalert/1915 - http://aria-security.net/advisory/bpg.txt
CVE ID: CVE-2006-6111 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp. NOTE: the category.asp vector is already covered by CVE-2004-1873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452023/100/0/threaded - http://www.osvdb.org/32751 - http://www.securityfocus.com/archive/1/451594/100/100/threaded - https://exchange.xforce.ibmcloud.
www.osvdb.org/32751 - http://www.securityfocus.com/archive/1/451594/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30280 - http://www.securityfocus.com/bid/21166 - http://www.securityfocus.com/archive/1/452006/100/0/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=27 - http://www.osvdb.org/32750
CVE ID: CVE-2006-6112 State: PUBLISHED Published: 2006-12-06T22:00:00 Last Updated: 2024-08-07T20:12:31.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote attackers to obtain the installation path via a direct request to any of the scripts, as demonstrated by (a) bayesianfilter.class.php and (b) bootstrap.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30685 - http://www.lifetype.net/blog.php/lifetype-development-journal/2006/11/30/full_path_disclosure_vulne
ww.osvdb.org/30685 - http://www.lifetype.net/blog.php/lifetype-development-journal/2006/11/30/full_path_disclosure_vulnerability_in_lifetype_1.0.x_and_1.1.x - http://securityreason.com/securityalert/1980 - http://www.securityfocus.com/archive/1/453135/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30635 - http://www.netvigilance.com/advisory0008
CVE ID: CVE-2006-6113 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:12:31.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin_auth.inc.php and (2) include/engine/class.compiler.php, which reveals the full path in an error message. NOTE: this issue is only an exposure if the administrator has changed the default script path. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050969.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1603389&group_
mail/full-disclosure/2006-November/050969.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1603389&group_id=165094&atid=834302 - http://www.netvigilance.com/advisory0009 - http://www.osvdb.org/30683 - http://www.securityfocus.com/archive/1/452994/100/0/threaded - http://www.osvdb.org/30684
CVE ID: CVE-2006-6114 State: REJECTED Published: 2006-11-26T22:00:00 Last Updated: 2007-01-17T10:00:00 Description: No description available.
CVE ID: CVE-2006-6115 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4681 - http://www.securityfocus.com/bid/21258 - http://secunia.com/advisories/23061 - https://www.exploit-db.com/exploits/2828
CVE ID: CVE-2006-6116 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4682 - https://www.exploit-db.com/exploits/2830 - http://www.securityfocus.com/bid/21253 - http://secunia.com/advisories/23057
CVE ID: CVE-2006-6117 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4683 - https://www.exploit-db.com/exploits/2829 - http://www.securityfocus.com/bid/21254 - http://secunia.com/advisories/23056
CVE ID: CVE-2006-6118 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21281 - http://securityreason.com/securityalert/1917 - http://securitytracker.com/id?1017283 - http://www.securityfocus.com/archive/1/452558/100/0/threaded - http://secunia.com/advisories/23130
CVE ID: CVE-2006-6119 State: PUBLISHED Published: 2006-11-26T22:00:00 Last Updated: 2024-08-07T20:12:31.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1917 - http://securitytracker.com/id?1017283 - http://www.securityfocus.com/archive/1/452558/100/0/threaded - http://secunia.com/advisories/23130
CVE ID: CVE-2006-6120 State: PUBLISHED Published: 2006-12-03T17:00:00 Last Updated: 2024-08-07T20:12:31.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4771 - http://secunia.com/advisories/23220 - http://secunia.com/advisories/23143 - http://www.securityfocus.com/bid/21354 - http://websvn.kde.org/br
visories/23220 - http://secunia.com/advisories/23143 - http://www.securityfocus.com/bid/21354 - http://websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc?rev=607037&r1=566347&r2=607037 - http://securitytracker.com/id?1017318 - http://secunia.com/advisories/23409 - http://secunia.com/advisories/24218 - http://www.ubuntu.com/usn/usn-388-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:222 - http://security.gentoo.org/glsa/glsa-200612-05.xml - http://www.redhat.com/support/errata/RHSA-2007-0010.html - http://www.securityfocus.com/archive/1/453550/100/0/threaded - http://www.koffice.org/announcements/changelog-1.6.1.php - http://www.novell.com/linux/secur
e/1/453550/100/0/threaded - http://www.koffice.org/announcements/changelog-1.6.1.php - http://www.novell.com/linux/security/advisories/2006_29_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30624 - http://secunia.com/advisories/23162 - http://www.kde.org/info/security/advisory-20061204-1.txt
CVE ID: CVE-2006-6121 State: PUBLISHED Published: 2006-11-26T23:00:00 Last Updated: 2024-08-07T20:12:31.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23003 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - ftp://ftp.support.acer-euro.com/utilities/LaunchAppFix/AcerLAppFix.zip - http://global.acer.com/support/patch20070101.htm - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2006/46
1.htm - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2006/4602 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://www.f-secure.com/weblog/archives/archive-012007.html#00001073 - http://www.kb.cert.org/vuls/id/221700 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.securityfocus.com/bid/21207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30417 - http://vuln.sg/acerlunchapp-en.html
CVE ID: CVE-2006-6122 State: PUBLISHED Published: 2006-11-26T23:00:00 Last Updated: 2024-08-07T20:12:31.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors, a different vulnerability than CVE-2006-0804. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30564 - http://www.gentoo.org/security/en/glsa/glsa-200611-18.xml
CVE ID: CVE-2006-6123 State: PUBLISHED Published: 2006-11-26T23:00:00 Last Updated: 2024-08-07T20:12:31.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate _GET, _REQUEST, or other critical parameters, which are unset by the protection scheme and prevent the original variable from being detected. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27618 - http://securityreason.com/securityalert/1914 - http://
CVE Program Container: References: - http://www.osvdb.org/27618 - http://securityreason.com/securityalert/1914 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0482.html - http://myimei.com/security/2006-06-20/coppermine-148parameter-cleanup-system-bypassregistering-global-varables.html - http://secunia.com/advisories/20597 - http://svn.sourceforge.net/viewvc/coppermine?view=rev&revision=3133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27376
CVE ID: CVE-2006-6124 State: PUBLISHED Published: 2006-11-26T23:00:00 Last Updated: 2024-08-07T20:12:31.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SeleniumServer Web Server 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30313 - http://secunia.com/advisories/22927 - http://www.osvdb.org/30454
CVE ID: CVE-2006-6125 State: PUBLISHED Published: 2006-11-27T00:00:00 Last Updated: 2024-08-07T20:19:33.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to execute arbitrary code via an 802.11 management frame with a long SSID. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23051 - http://www.kb.cert.org/vuls/id/403152 - http://www.securityfocus.com/bid/21251 - http://projects.info-pull.com/mokb/MOKB-22-11-2006.html - http://securitytracker.com/id?1017275 - http://www.vupen.com/english/advisories/
fo-pull.com/mokb/MOKB-22-11-2006.html - http://securitytracker.com/id?1017275 - http://www.vupen.com/english/advisories/2006/4674
CVE ID: CVE-2006-6126 State: PUBLISHED Published: 2006-11-27T00:00:00 Last Updated: 2024-08-07T20:19:33.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X allows local users to cause a denial of service (memory corruption) via a crafted Mach-O binary with a malformed load_command data structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30549 - http://www.securityfocus.com/bid/21272 - http://projects.info-pull.com/mokb/MOKB-23-11-2006.html - http://www.osvdb.org/30740
CVE ID: CVE-2006-6127 State: PUBLISHED Published: 2006-11-27T00:00:00 Last Updated: 2024-08-07T20:19:33.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event, then fork a child process that uses kevent to register an event for the same queue as the parent. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30544 - http://www.securityfocus.com/bid/21285 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info
ecurityfocus.com/bid/21285 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2006/4715 - http://secunia.com/advisories/23114 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://projects.info-pull.com/mokb/MOKB-24-11-2006.html - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://www.osvdb.org/30695
CVE ID: CVE-2006-6128 State: PUBLISHED Published: 2006-11-27T00:00:00 Last Updated: 2024-08-07T20:19:34.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReiserFS functionality in Linux kernel 2.6.18, and possibly other versions, allows local users to cause a denial of service via a malformed ReiserFS file system that triggers memory corruption when a sync is performed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30551 - http://www.vupen.com/english/advisories/2006/4716 - http://secunia.com/advisories/23093 - http://projects.info-pull.com/mokb/MOKB-25-11-2006.html
CVE ID: CVE-2006-6129 State: PUBLISHED Published: 2006-11-27T00:00:00 Last Updated: 2024-08-07T20:19:33.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal program that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30706 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.vupen.com/english/advisories/2006/4714 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?a
4 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securityfocus.com/bid/21291 - http://www.securitytracker.com/id?1017751 - http://secunia.com/advisories/23088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30547 - http://projects.info-pull.com/mokb/MOKB-26-11-2006.html - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-6130 State: PUBLISHED Published: 2006-11-28T01:00:00 Last Updated: 2024-08-07T20:19:34.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN ioctl command with a crafted data structure on an AppleTalk socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://www.securityfocus.com/bid/21317 - https://ex
cle.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://www.securityfocus.com/bid/21317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30552 - http://www.vupen.com/english/advisories/2006/4746 - http://www.osvdb.org/30722 - http://secunia.com/advisories/23134 - http://www.vupen.com/english/advisories/2007/0930 - http://projects.info-pull.com/mokb/MOKB-27-11-2006.html - http://secunia.com/advisories/24479
CVE ID: CVE-2006-6131 State: PUBLISHED Published: 2006-11-28T01:00:00 Last Updated: 2024-08-07T20:19:33.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21123 - http://securitytracker.com/id?1017239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30308 - http://www.digitalmunition.com/DMA%5B20
er.com/id?1017239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30308 - http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt - http://www.securityfocus.com/archive/1/451832/100/200/threaded - http://www.osvdb.org/30450 - http://securityreason.com/securityalert/1921 - http://www.vupen.com/english/advisories/2006/4539 - http://secunia.com/advisories/22906
CVE ID: CVE-2006-6132 State: PUBLISHED Published: 2006-11-28T01:00:00 Last Updated: 2024-08-07T20:19:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search.asp and (2) psearch parameter to linkslist.asp. Additional Analyst Notes: - CVE Program Container: References: - http://s-a-p.ca/index.php?page=OurAdvisories&id=53 - http://www.vupen.com/english/advisories/2006/4656 - http://securityreason.com/securityalert/1920 - http://www.securityfocus.com/archive/1/452256/100/0/threaded - http://www.securityfocus.com/bid/21239 - htt
alert/1920 - http://www.securityfocus.com/archive/1/452256/100/0/threaded - http://www.securityfocus.com/bid/21239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30460 - http://secunia.com/advisories/23068
CVE ID: CVE-2006-6133 State: PUBLISHED Published: 2006-11-28T01:00:00 Last Updated: 2024-08-07T20:19:33.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017279 - http://www.vupen.com/english/advisories/2007/3114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30532 - https:/
http://www.vupen.com/english/advisories/2007/3114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30532 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052 - http://secunia.com/advisories/26754 - http://secunia.com/advisories/23091 - http://www.vupen.com/english/advisories/2006/4691 - http://www.us-cert.gov/cas/techalerts/TA07-254A.html - http://www.securityfocus.com/bid/21261 - http://www.lssec.com/advisories/LS-20061102.pdf - http://www.securityfocus.com/archive/1/452464/100/0/threaded
CVE ID: CVE-2006-6134 State: PUBLISHED Published: 2006-11-28T01:00:00 Last Updated: 2024-08-07T20:19:35.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017354 - http://support.avaya.com/elmodocs2/security/A
E Program Container: References: - http://securitytracker.com/id?1017354 - http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078 - http://securityreason.com/securityalert/1922 - http://www.kb.cert.org/vuls/id/208769 - http://secunia.com/advisories/22971 - http://www.securityfocus.com/archive/1/452352/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A669 - http://research.eeye.com/html/alerts/zeroday/20061122.html - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://blogs.tec
om/html/alerts/zeroday/20061122.html - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.vupen.com/english/advisories/2006/4882 - http://www.securityfocus.com/bid/21247 - http://www.securityfocus.com/archive/1/453579/100/0/threaded