Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0021 State: PUBLISHED Published: 2006-02-14T19:00:00 Last Updated: 2024-08-07T16:18:20.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310 - http://www.vupen.com/english/advisories/2006/0576 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007 - https://oval.cisecurity.org/repos
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24489 - http://www.securityfocus.com/bid/16645 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1662 - http://www.kb.cert.org/vuls/id/839284 - http://www.us-cert.gov/cas/techalerts/TA06-045A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A678 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1647 - http://securitytracker.com/id?1015629 - h
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1647 - http://securitytracker.com/id?1015629 - http://www.securityfocus.com/archive/1/482658/30/4350/threaded - https://www.exploit-db.com/exploits/1599 - http://www.securiteam.com/exploits/5PP0T0KI0O.html - http://secunia.com/advisories/18853
CVE ID: CVE-2006-0022 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T16:18:20.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016287 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1984 - http://www.us-cert.gov/cas/techal
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1984 - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-028 - http://secunia.com/advisories/20633 - http://www.kb.cert.org/vuls/id/190089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1069 - http://www.osvdb.org/26435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26784 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1836 - http://www.vupen.com/english/advisories/2006/2325 - http://www.securityfocus.com/bid/18382
CVE ID: CVE-2006-0023 State: PUBLISHED Published: 2006-02-08T02:00:00 Last Updated: 2024-08-07T16:18:20.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
issive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19313 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1671 - http://securitytracker.com/id?1015765 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - http://secunia.com/advisories/19238 - http://www.securityfocus.com/archive/1/423587/100/0/threaded - http://www.kb.cert.org/vuls/id/953860 - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID= - http://www.cs.princeton.edu/~
lnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID= - http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24463 - http://secunia.com/advisories/18756 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1696 - http://www.microsoft.com/technet/security/advisory/914457.mspx - http://securitytracker.com/id?1015595 - http://www.vupen.com/english/advisories/2006/0417
CVE ID: CVE-2006-0024 State: PUBLISHED Published: 2006-03-15T16:00:00 Last Updated: 2024-08-07T16:18:20.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html - http://www.vupen.com/english/advisories/2007/4238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25005 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.vupen.com/english/adv
loud.com/vulnerabilities/25005 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.vupen.com/english/advisories/2006/1779 - http://www.osvdb.org/23908 - http://www.vupen.com/english/advisories/2006/1262 - http://www.securityfocus.com/bid/17106 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://secunia.com/advisories/28136 - http://secunia.com/advisories/19259 - http://www.opera.com/docs/changelogs/windows/854/ - http://www.us-cert.gov/cas/techalerts/TA06-129A.html - http://securitytracker.com/id?1015770 - http://www.redhat.com/support/errata/RHSA-2006-0268.html - http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml - http://secunia.com/advisories/20045 - htt
A-2006-0268.html - http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml - http://secunia.com/advisories/20045 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://www.novell.com/linux/security/advisories/2006_15_flashplayer.html - http://www.us-cert.gov/cas/techalerts/TA06-075A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1922 - http://secunia.com/advisories/19328 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/19218 - http://secunia.com/advisories/19198 - http://www.vupen.com/english/advisories
79 - http://secunia.com/advisories/19218 - http://secunia.com/advisories/19198 - http://www.vupen.com/english/advisories/2006/1744 - http://secunia.com/advisories/20077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1894 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020 - http://www.vupen.com/english/advisories/2006/0952 - http://www.kb.cert.org/vuls/id/945060
CVE ID: CVE-2006-0025 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T16:18:20.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26788 - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406 - http://securitytracker.com/id?1016284 - https://oval.cisecurity.org/repositor
gence/vulnerabilities/display.php?id=406 - http://securitytracker.com/id?1016284 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729 - http://www.osvdb.org/26430 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024 - http://www.kb.cert.org/vuls/id/608020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230 - http://www.vupen.com/english/advisories/2006/2322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974 - http://www.securityfocus.com/bid/183
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974 - http://www.securityfocus.com/bid/18385 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820
CVE ID: CVE-2006-0026 State: PUBLISHED Published: 2006-07-11T22:00:00 Last Updated: 2024-08-07T16:18:20.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-07/0316.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-034 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A435 - http://www.osvdb.org/27152 - htt
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A435 - http://www.osvdb.org/27152 - http://www.vupen.com/english/advisories/2006/2752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26796 - http://secunia.com/advisories/21006 - http://www.securityfocus.com/bid/18858 - http://www.kb.cert.org/vuls/id/395588 - http://securitytracker.com/id?1016466 - http://www.us-cert.gov/cas/techalerts/TA06-192A.html
CVE ID: CVE-2006-0027 State: PUBLISHED Published: 2006-05-09T22:00:00 Last Updated: 2024-08-07T16:18:20.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016048 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-019 - http://www.osvdb.org/25338 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1996 - https://oval.cisecurity.org/repository/search/d
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1996 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1818 - http://www.us-cert.gov/cas/techalerts/TA06-129A.html - http://secunia.com/advisories/20029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25556 - http://www.vupen.com/english/advisories/2006/1743 - http://www.securityfocus.com/bid/17908 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2035 - http://www.kb.cert.org/vuls/id/303452
CVE ID: CVE-2006-0028 State: PUBLISHED Published: 2006-03-14T23:00:00 Last Updated: 2024-08-07T16:18:20.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411 - https://ova
es/2006/0950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158 - http://securityreason.com/securityalert/583 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - http://secunia.com/advisories/19238 - http://www.kb.cert.org/vuls/id/339878 - http://www.us-cert.gov/cas/techalerts/TA06-073A.html - http://secunia.com/advisories/19138 - http://www.securityfocus.com/archive/1/427632/100/0/threaded - http://securitytracker.com/id?1015766 - http://www.osvdb.org
p://www.securityfocus.com/archive/1/427632/100/0/threaded - http://securitytracker.com/id?1015766 - http://www.osvdb.org/23899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25225 - http://www.zerodayinitiative.com/advisories/ZDI-06-004.html
CVE ID: CVE-2006-0029 State: PUBLISHED Published: 2006-03-14T23:00:00 Last Updated: 2024-08-07T16:18:20.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0950 - http://securityreason.com/securityalert/585 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1579 - http://support.avaya
585 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1579 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1570 - http://secunia.com/advisories/19238 - http://securityreason.com/securityalert/586 - http://www.kb.cert.org/vuls/id/235774 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1522 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1633 - http://www.us-cert.gov/cas/techalerts/TA06-073A.html - http://secunia.com/advisories/19138 - http://www.osvdb.org/23900 - http://se
us-cert.gov/cas/techalerts/TA06-073A.html - http://secunia.com/advisories/19138 - http://www.osvdb.org/23900 - http://securitytracker.com/id?1015766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25227 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
CVE ID: CVE-2006-0030 State: PUBLISHED Published: 2006-03-14T23:00:00 Last Updated: 2024-08-07T16:18:20.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1510 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - https:/
h/definition/oval%3Aorg.mitre.oval%3Adef%3A1510 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1630 - http://secunia.com/advisories/19238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25229 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1401 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1666 - http://www.us-cert.gov/cas/techalerts/TA06-073A.html - http://www.securityfocus.com/bid/16181 - http://secunia.com/advisories/19138 - http://www.osvdb.org/23901 - http://securitytracker.com/id?1015766 - htt
d/16181 - http://secunia.com/advisories/19138 - http://www.osvdb.org/23901 - http://securitytracker.com/id?1015766 - http://www.kb.cert.org/vuls/id/123222 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
CVE ID: CVE-2006-0031 State: PUBLISHED Published: 2006-03-14T23:00:00 Last Updated: 2024-08-07T16:18:20.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25228 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1327 - http://securityreason.com/secur
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1327 - http://securityreason.com/securityalert/589 - http://www.osvdb.org/23902 - http://www.vupen.com/english/advisories/2006/0950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1525 - http://www.securityfocus.com/archive/1/427699/100/0/threaded - http://www.securityfocus.com/bid/17101 - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - http://www.kb.cert.org/vuls/id/104302 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A763 - http://secunia.com/advisories/19238 - http://archives.neohapsis.com/archives/fulldisclosur
Aorg.mitre.oval%3Adef%3A763 - http://secunia.com/advisories/19238 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1521.html - http://www.us-cert.gov/cas/techalerts/TA06-073A.html - http://secunia.com/advisories/19138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1750 - http://securitytracker.com/id?1015766 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
CVE ID: CVE-2006-0032 State: PUBLISHED Published: 2006-09-12T23:00:00 Last Updated: 2024-08-07T16:18:20.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447509/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28651 - https://oval.cisecurity
m/archive/1/447509/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A535 - http://www.vupen.com/english/advisories/2006/3564 - http://www.kb.cert.org/vuls/id/108884 - http://securitytracker.com/id?1016826 - http://www.us-cert.gov/cas/techalerts/TA06-255A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-053 - http://www.securityfocus.com/archive/1/447511/100/0/threaded - http://www.geocities.jp/ptrs_sec/advisory09e.html - http://www.securityfocus.com/bid/19927 - http://www.securityfocus.com/archive/1/446630/100/100/threaded - http://secunia.com
://www.securityfocus.com/bid/19927 - http://www.securityfocus.com/archive/1/446630/100/100/threaded - http://secunia.com/advisories/21861 - http://www.securityfocus.com/archive/1/446630/100/100/threaded
CVE ID: CVE-2006-0033 State: PUBLISHED Published: 2006-07-11T21:00:00 Last Updated: 2024-08-07T16:18:20.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016470 - http://secunia.com/advisories/21013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A163 - http://www.kb.cert.org/vuls/id/459388 - http://w
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A163 - http://www.kb.cert.org/vuls/id/459388 - http://www.vupen.com/english/advisories/2006/2757 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039 - http://www.securityfocus.com/bid/18913 - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-22.html - http://www.us-cert.gov/cas/techalerts/TA06-192A.html - http://www.osvdb.org/27147
CVE ID: CVE-2006-0034 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T16:18:20.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldis
ability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1477 - http://www.securityfocus.com/archive/1/433677/100/0/threaded - http://www.securityfocus.com/bid/17906 - http://securitytracker.com/id?1016047 - http://www.osvdb.org/25335 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0238.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25559 - http://www.securityfocus.com/archive/1/433430/100/0/thre
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25559 - http://www.securityfocus.com/archive/1/433430/100/0/threaded - http://www.eeye.com/html/research/advisories/AD20060509a.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1908 - http://securityreason.com/securityalert/863 - http://www.vupen.com/english/advisories/2006/1742 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018 - http://secunia.com/advisories/20000
CVE ID: CVE-2006-0035 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:18:20.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite loop) via a nlmsg_len field of 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0220 - http://www.securityfocus.com/bid/16414 - http://securityreason.com/securityalert/388 - http://www.trustix.org/errata/2006/0004 - http://secunia.com/advisories/18482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24202 - http://www.kerne
04 - http://secunia.com/advisories/18482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24202 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad8e4b75c8a7bed475d72ce09bf5267188621961