Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1368 State: PUBLISHED Published: 2008-03-18T00:00:00 Last Updated: 2024-08-07T08:17:34.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF (%0D%0A) before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or possibly a regression of CVE-2004-1166. NOTE: a trailing "//" can force Internet Explorer to try to reuse an existing authenticated connection.
CVE-2004-1166. NOTE: a trailing "//" can force Internet Explorer to try to reuse an existing authenticated connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/advisories/R7-0032.jsp - http://www.securityfocus.com/archive/1/489500/100/0/threaded - http://secunia.com/advisories/29346 - http://securityreason.com/securityalert/3750 - http://www.securityfocus.com/bid/28208 - http://www.vupen.com/english/advisories/2008/0870
CVE ID: CVE-2008-1369 State: PUBLISHED Published: 2008-03-18T17:00:00 Last Updated: 2024-08-07T08:17:34.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0810/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41332 - http://secunia.com/advisories/29529 - http://sunsolve.sun.com/sea
//exchange.xforce.ibmcloud.com/vulnerabilities/41332 - http://secunia.com/advisories/29529 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1 - http://www.securitytracker.com/id?1019708 - http://www.securityfocus.com/bid/28469
CVE ID: CVE-2008-1370 State: PUBLISHED Published: 2008-03-18T17:00:00 Last Updated: 2024-08-07T08:17:34.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41049 - http://www.securityfocus.com/bid/28120
CVE ID: CVE-2008-1371 State: PUBLISHED Published: 2008-03-18T17:00:00 Last Updated: 2024-08-07T08:17:34.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full pathname in the d_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28165 - http://www.securityfocus.com/bid/28165/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/41345
CVE ID: CVE-2008-1372 State: PUBLISHED Published: 2008-03-18T21:00:00 Last Updated: 2024-08-07T08:17:34.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41249 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://www.bzip.org/CHANGES - http://sunsolve.sun.com/search/docu
org/opensuse-security-announce/2008-05/msg00000.html - http://www.bzip.org/CHANGES - http://sunsolve.sun.com/search/document.do?assetkey=1-26-241786-1 - http://secunia.com/advisories/36096 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00165.html - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc - http://www.securityfocus.com/archive/1/498863/100/0/threaded - http://www.vupen.com/english/advisories/2008/2557 - http://secunia.com/advisories/31878 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473263 - http://secunia.com/advisories/31869 - http://www.securitytracker.com/id?1020867 - http://w
m=slackware-security.473263 - http://secunia.com/advisories/31869 - http://www.securitytracker.com/id?1020867 - http://www.redhat.com/support/errata/RHSA-2008-0893.html - http://kb.vmware.com/kb/1007504 - http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.kb.cert.org/vuls/id/813451 - https://bugs.gentoo.org/attachment.cgi?id=146488&action=view - http://kb.vmware.com/kb/1007198 - http://www.gentoo.org/security/en/glsa/glsa-200804-02.xml - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00225.html - http://kb.vmware.com/kb/1006982 - http://www.ipcop.org/index.php?na
s/fedora-package-announce/2008-April/msg00225.html - http://kb.vmware.com/kb/1006982 - http://www.ipcop.org/index.php?name=News&file=article&sid=40 - http://secunia.com/advisories/29656 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0118 - http://secunia.com/advisories/29475 - http://secunia.com/advisories/29698 - http://secunia.com/advisories/29497 - http://secunia.com/advisories/29940 - http://www.securityfocus.com/archive/1/489968/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6467 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10067 - http://security.gentoo.org/glsa/glsa-200903-40.xml -
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10067 - http://security.gentoo.org/glsa/glsa-200903-40.xml - http://secunia.com/advisories/31204 - https://usn.ubuntu.com/590-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:075 - http://www.vupen.com/english/advisories/2008/0915 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/ - http://secunia.com/advisories/29506 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://www.securityfocus.com/bid/28286 - http://secunia.com/advisories/29410 - http://secunia.com/advisories/29677
CVE ID: CVE-2008-1373 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T08:17:34.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0206.html - http://secunia.com/advisories/31324 - http://secunia.com/advisories/29659 - http://secunia.com/advisories/29573 - http://www.cups.org/str.php?L2765 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg
ories/29573 - http://www.cups.org/str.php?L2765 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html - http://www.securityfocus.com/bid/28544 - http://www.vupen.com/english/advisories/2008/1059/references - http://www.ubuntu.com/usn/usn-598-1 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:081 - http://secunia.com/advisories/29630 - http://secunia.com/advisories/29750 - http://wiki.rpath.com/Advisories:rPSA-2008-0136 - http://www.securitytracker.com/id?1019739 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11479 - https://www.redha
19739 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11479 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html - http://secunia.com/advisories/29634 - http://secunia.com/advisories/29655 - http://www.securityfocus.com/archive/1/490486/100/0/threaded - http://www.debian.org/security/2008/dsa-1625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41587 - http://secunia.com/advisories/29661 - http://www.redhat.com/support/errata/RHSA-2008-0192.html - http://security.gentoo.org/glsa/glsa-200804-01.xml - http://secunia.com/advisories/29603
CVE ID: CVE-2008-1374 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T08:17:34.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0206.html - http://secunia.com/advisories/31388 - http://www.securityfocus.com/archive/1/495164/100/0/threaded - http://secunia.com/advisories/29630 - https://issues.rp
- http://www.securityfocus.com/archive/1/495164/100/0/threaded - http://secunia.com/advisories/29630 - https://issues.rpath.com/browse/RPL-2390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9636 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41758
CVE ID: CVE-2008-1375 State: PUBLISHED Published: 2008-05-02T16:00:00 Last Updated: 2024-08-07T08:17:34.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-kernel&m=120967963803205&w=2 - http://secunia.com/advisories/30962 - http://www.vupen.com/english/advisories/2008/1406/references - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157 - http://www.se
vupen.com/english/advisories/2008/1406/references - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157 - http://www.securityfocus.com/bid/29003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42131 - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://www.securitytracker.com/id?1019959 - http://www.vupen.com/english/advisories/2008/1452/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://www.ubuntu.com/usn/usn-618-1 - http://www.debian.org/security/2008/dsa-1565 - http://secunia.com/advisories/30116 - http://www.redhat.com/support/errata/RHSA-2008-0233.html - http://secunia.com/advisories/30110 - http://lists.opensuse.org/opensuse-secu
t.com/support/errata/RHSA-2008-0233.html - http://secunia.com/advisories/30110 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html - http://www.vupen.com/english/advisories/2008/2222/references - http://www.securityfocus.com/archive/1/491732/100/0/threaded - http://marc.info/?l=linux-kernel&m=120967964303224&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843 - http://secunia.com/advisories/30515 - http://www.securityfocus.com/archive/1/491566/100/0/threaded - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6 - https://usn.ubunt
com/archive/1/491566/100/0/threaded - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6 - https://usn.ubuntu.com/614-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://secunia.com/advisories/30108 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 - http://secunia.com/advisories/30044 - http://www.redhat.com/support/errata/RHSA-2008-0211.html - http://secunia.com/advisories/30017 - http://secunia.com/advisories/30890 - https://issues.rpath.com/browse/RPL-2501 - http://secunia.com/advisories/30769 - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http:/
01 - http://secunia.com/advisories/30769 - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://secunia.com/advisories/30018 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:104 - http://secunia.com/advisories/30260 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/31246 - http://secunia.com/advisories/30818 - http://wiki.rpath.com/Advisories:rPSA-2008-0157 - http://secunia.com/advisories/30112 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2008-1376 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T08:17:34.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44256 - http://www.securitytracker.com/id?1020589 - http://secunia.com/advisories/31322 - http://www.redhat.com/support/errata/RHSA-2008-0486.html - https://oval.cisecurity.org/repository/search/definition/
2 - http://www.redhat.com/support/errata/RHSA-2008-0486.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638 - http://www.redhat.com/support/errata/RHSA-2009-0955.html - http://www.securityfocus.com/bid/30466 - http://secunia.com/advisories/35162
CVE ID: CVE-2008-1377 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:17:34.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - ht
rruption. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - http://secunia.com/advisories/30629 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10109 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/30664 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:115 - http://www.securityfocus.com/archive/1/493550/100/0/threaded - http://secunia.com/advisories/31025 - http://rhn.redhat.com/errata/RHSA-2008-0502.html - http://h2000
0/100/0/threaded - http://secunia.com/advisories/31025 - http://rhn.redhat.com/errata/RHSA-2008-0502.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://security.gentoo.org/glsa/glsa-200806-07.xml - http://secunia.com/advisories/30715 - http://secunia.com/advisories/30666 - http://secunia.com/advisories/30627 - http://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - http://www.vupen.co
p://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - http://www.vupen.com/english/advisories/2008/1803 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1377.diff - http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://secunia.com/advisories/30772 - http://securitytracker.com/id?1020247 - http://www.redhat.com/support/errata/RHSA-2008-0503.html - http://secunia.com/advisories/30628 - http://secunia.com/advisories/30659 - http://secunia.com/adv
RHSA-2008-0503.html - http://secunia.com/advisories/30628 - http://secunia.com/advisories/30659 - http://secunia.com/advisories/31109 - http://www.vupen.com/english/advisories/2008/1983/references - http://secunia.com/advisories/30671 - http://secunia.com/advisories/30809 - http://www.vupen.com/english/advisories/2008/3000 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/32545 - http://secunia.com/advisories/30843 - http://www.debian.org/security/2008/dsa-1595 - http://www.ubuntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.
buntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://rhn.redhat.com/errata/RHSA-2008-0512.html - http://www.securityfocus.com/archive/1/493548/100/0/threaded - http://secunia.com/advisories/30630 - http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml
CVE ID: CVE-2008-1378 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-16T17:57:45.751Z Description: No description available.
CVE ID: CVE-2008-1379 State: PUBLISHED Published: 2008-06-16T19:00:00 Last Updated: 2024-08-07T08:17:34.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020246 - https://issues.rpath.com/browse/RPL-2607 - http://secunia.com/advisories/30629 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secuni
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/30664 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:115 - http://www.securityfocus.com/archive/1/493550/100/0/threaded - http://secunia.com/advisories/31025 - ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1379.diff - http://rhn.redhat.com/errata/RHSA-2008-0502.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://support.apple.com/kb/HT3438 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=722 - http://lists.apple.com/archives/security-announce/200
abs.idefense.com/intelligence/vulnerabilities/display.php?id=722 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://security.gentoo.org/glsa/glsa-200806-07.xml - http://secunia.com/advisories/30715 - http://secunia.com/advisories/30666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43016 - http://secunia.com/advisories/30627 - http://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8966 - http://www.vupen.com/engl
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8966 - http://www.vupen.com/english/advisories/2008/1803 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://secunia.com/advisories/30772 - http://www.redhat.com/support/errata/RHSA-2008-0503.html - http://secunia.com/advisories/30628 - http://secunia.com/advisories/30659 - http://secunia.com/advisories/31109 - http://www.vupen.com/english/advisories/2008/1983/references - http://secunia.com/advisories/30671 - http://secunia.com
http://www.vupen.com/english/advisories/2008/1983/references - http://secunia.com/advisories/30671 - http://secunia.com/advisories/30809 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:179 - http://www.vupen.com/english/advisories/2008/3000 - http://www.securityfocus.com/bid/29669 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/32545 - http://secunia.com/advisories/30843 - http://www.debian.org/security/2008/dsa-1595 - http://www.ubuntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-securi
tp://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://rhn.redhat.com/errata/RHSA-2008-0512.html - http://www.securityfocus.com/archive/1/493548/100/0/threaded - http://secunia.com/advisories/30630 - http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml
CVE ID: CVE-2008-1380 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:17:34.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.h
ackage-announce/2008-April/msg00407.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/29908 - http://secunia.com/advisories/30012 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29912 - http://secunia.com/advisories/29787 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://secunia.com/advisories/29883 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.kb.cert.org/vuls/id/441529 - http://secunia.com/advis
lve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.kb.cert.org/vuls/id/441529 - http://secunia.com/advisories/31377 - http://secunia.com/advisories/29828 - http://www.debian.org/security/2008/dsa-1562 - http://secunia.com/advisories/31023 - http://www.vupen.com/english/advisories/2008/1793/references - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://www.mozilla.org/security/announce/2008/mfsa2008-20.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:110 - http://www.securityfocus.com/bid/28818 - http://www.redhat.com/support/errata/RHSA-2008-0223.html - http://www.securityfocus.com/archive/1/491838/100/0/threaded - http://secunia.com/advisories/298