Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4228 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021271 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.se
v/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://osvdb.org/50025 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4229 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021271 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://osvdb.org/50026 - http://www.vupen.com/english/advisories/2008/3232 - http://support.ap
/2008/Nov/msg00002.html - http://osvdb.org/50026 - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4230 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a duplicate of CVE-2008-4593. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50027 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/200
- http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4231 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguardcenter.com/advisory/FGA-2009-23.html - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://lists.apple.com/archives/security-an
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2009/1522 - http://www.vupen.com/english/advisories/2008/3232 - http://secunia.com/advisories/35379 - http://www.securityfocus.com/archive/1/504211/100/0/threaded - http://support.apple.com/kb/HT3318 - http://www.securitytracker.com/id?1021272 - http://osvdb.org/50028 - http://www.securityfocus.com/bid/32394 - http://support.apple.com/kb/HT3613 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4232 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://osvdb.org/50029 - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.securitytracker.
9 - http://www.vupen.com/english/advisories/2008/3232 - http://support.apple.com/kb/HT3318 - http://www.securitytracker.com/id?1021272 - http://www.securityfocus.com/bid/32394 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4233 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:35.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://securitytracker.com/id?1021264 - http://support.apple.com/kb/HT3318
/www.vupen.com/english/advisories/2008/3232 - http://securitytracker.com/id?1021264 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://osvdb.org/50030 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4234 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a "potentially unsafe" warning message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/adviso
upen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47689 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://www.securitytracker.com/id?1021400
CVE ID: CVE-2008-4236 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000
m/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://securitytracker.com/id?1021398 - http://www.securityfocus.com/bid/32875
CVE ID: CVE-2008-4237 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:35.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/3283
.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://www.securitytracker.com/id?1021407 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://www.securityfocus.com/bid/32880
CVE ID: CVE-2008-4241 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6536 - http://www.securityfocus.com/bid/31333 - http://securityreason.com/securityalert/4316 - http://www.vupen.com/english/advisories/2008/2651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45458
CVE ID: CVE-2008-4242 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31289 - http://securityreason.com/achievement_securityalert/56 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:0
- http://securityreason.com/achievement_securityalert/56 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 - http://www.securitytracker.com/id?1020945 - http://secunia.com/advisories/31930 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00245.html - http://secunia.com/advisories/33261 - http://secunia.com/advisories/33413 - http://securityreason.com/securityalert/4313 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00078.html - http://www.debian.org/security/2008/dsa-1689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45274 - http://bugs.proftpd.org/show_bug.cgi?id=3115
CVE ID: CVE-2008-4243 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45292 - http://aluigi.org/adv/ut3webown-adv.txt - https://www.exploit-db.com/exploits/6506 - http://www.vupen.com/english/advisories/2008/2635 - http:/
t3webown-adv.txt - https://www.exploit-db.com/exploits/6506 - http://www.vupen.com/english/advisories/2008/2635 - http://secunia.com/advisories/31926 - http://ut3webadmin.elmuerte.com/download.php?t=2008-09-21 - http://www.securityfocus.com/bid/31272
CVE ID: CVE-2008-4244 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45291 - http://securityreason.com/securityalert/4312 - https://www.exploit-db.com/exploits/6521 - http://www.securityfocus.com/bid/31292
CVE ID: CVE-2008-4245 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45290 - https://www.exploit
ttp://www.securityfocus.com/bid/31296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45290 - https://www.exploit-db.com/exploits/6513 - http://securityreason.com/securityalert/4311
CVE ID: CVE-2008-4246 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service (application crash) via a crafted CTCP response. Additional Analyst Notes: - CVE Program Container: References: - http://dev.denorastats.org/news/show/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45230 - http://denorastats.org/?p=home - http://www.securityfocus.com/bid/31233
CVE ID: CVE-2008-4247 State: PUBLISHED Published: 2008-09-25T19:00:00 Last Updated: 2024-08-07T10:08:34.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021112 - http://www.openbsd.org/cgi-bin/cvsweb
- CVE Program Container: References: - http://www.securitytracker.com/id?1021112 - http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y.diff?r1=1.51&r2=1.52&f=h - http://www.securitytracker.com/id?1020946 - http://securityreason.com/achievement_securityalert/56 - http://secunia.com/advisories/33341 - http://bugs.proftpd.org/show_bug.cgi?id=3115 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-014.txt.asc - http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y - http://secunia.com/advisories/32068 - http://security.FreeBSD.org/advisories/FreeBSD-SA-08:12.ftpd.asc - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://secunia
es/FreeBSD-SA-08:12.ftpd.asc - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://secunia.com/advisories/32070 - http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c.diff?r1=1.183&r2=1.184&f=h - http://securityreason.com/securityalert/4313 - http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c
CVE ID: CVE-2008-4248 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4249 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4250 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:08:34.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://secunia.com/advisories/32326 - http://www.kb.c
References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://secunia.com/advisories/32326 - http://www.kb.cert.org/vuls/id/827267 - http://www.securitytracker.com/id?1021091 - https://www.exploit-db.com/exploits/7132 - https://www.exploit-db.com/exploits/6841 - http://www.securityfocus.com/bid/31874 - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 - http://blogs.securiteam.com/index.php/archives/1150 - https://www.exploit-db.com/exploits/6824 - http://www.vupen.com/english/advisories/2008/2902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46040 - http://www.securityfocus.com/archive/1
visories/2008/2902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46040 - http://www.securityfocus.com/archive/1/497808/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA08-297A.html - https://www.exploit-db.com/exploits/7104 - http://www.us-cert.gov/cas/techalerts/TA09-088A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093 - http://www.securityfocus.com/archive/1/497816/100/0/threaded
CVE ID: CVE-2008-4251 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4252 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:08:34.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "DataGrid Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3382 - http://www.securitytracker.com/id?1021369
Container: References: - http://www.vupen.com/english/advisories/2008/3382 - http://www.securitytracker.com/id?1021369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - http://www.securityfocus.com/bid/32591 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5894
CVE ID: CVE-2008-4253 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:08:34.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32592 -
lnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32592 - http://www.vupen.com/english/advisories/2008/3382 - http://www.securitytracker.com/id?1021369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5994
CVE ID: CVE-2008-4254 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:08:34.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: -
cal FlexGrid Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805 - http://www.vupen.com/english/advisories/2008/3382 - http://secunia.com/secunia_research/2007-72/ - http://www.securitytracker.com/id?1021369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - http://www.securityfocus.com/archive/1/499059/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html
CVE ID: CVE-2008-4255 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:08:35.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability." Additional Analyst Notes: - CVE Pr
rror" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32613 - http://www.vupen.com/english/advisories/2008/3382 - http://www.zerodayinitiative.com/advisories/ZDI-08-083/ - http://www.zerodayinitiative.com/advisories/ZDI-08-083 - http://www.securitytracker.com/id?1021369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6032 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - h
http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.securityfocus.com/archive/1/499061/100/0/threaded - http://downloads.securityfocus.com/vulnerabilities/exploits/32613.pl
CVE ID: CVE-2008-4256 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:08:34.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3382 - htt
Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3382 - http://www.securityfocus.com/bid/32614 - http://www.securitytracker.com/id?1021369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5651 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html