Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1338 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails". Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/25315 - http://www.mailenable.com/enterprisehistory.asp - http://secunia.com/advisories/19288 - http://www.osvdb.org/240
25315 - http://www.mailenable.com/enterprisehistory.asp - http://secunia.com/advisories/19288 - http://www.osvdb.org/24014 - http://www.vupen.com/english/advisories/2006/1006 - http://www.securityfocus.com/bid/17161
CVE ID: CVE-2006-1339 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19289 - http://www.securityfocus.com/bid/17152 - http://hami
gram Container: References: - http://secunia.com/advisories/19289 - http://www.securityfocus.com/bid/17152 - http://hamid.ir/security/cutenews.txt - http://www.securityfocus.com/archive/1/428434/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25324
CVE ID: CVE-2006-1340 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19289 - http://www.securityfocus.com/bid/17152 - http://hamid.ir/security/cutenews.txt - http://www.securityfocus.com/archive/1/428434/100/0/threaded
CVE ID: CVE-2006-1341 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/646 - http://evuln.com/vulns/102/description.html - http://secunia.com/advisories/19274 - http://www.vupen.com/english/advisories/2006/0993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25298 - http://www.osvdb.org/23947 - http://www.securityfocus.com/arc
tps://exchange.xforce.ibmcloud.com/vulnerabilities/25298 - http://www.osvdb.org/23947 - http://www.securityfocus.com/archive/1/429093/100/0/threaded
CVE ID: CVE-2006-1342 State: PUBLISHED Published: 2006-03-21T18:00:00 Last Updated: 2024-08-07T17:12:20.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b - http://www.vupen.com/english/advisories/2006/4502 - http://www.redhat.com/support/err
fa80c9094f1748c1be064b9326c9ef2b - http://www.vupen.com/english/advisories/2006/4502 - http://www.redhat.com/support/errata/RHSA-2006-0579.html - http://secunia.com/advisories/22875 - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://secunia.com/advisories/21035 - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://www.vmware.com/download/esx/esx-254-200610-patch.html - http://secunia.com/advisories/19357 - http://www.securityfocus.com/archive/1/451404/100/0/threaded
-200610-patch.html - http://secunia.com/advisories/19357 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - http://secunia.com/advisories/20398 - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://www.securityfocus.com/bid/17203 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://marc.info/?l=linux-netdev&m=114148078223594&w=2
CVE ID: CVE-2006-1343 State: PUBLISHED Published: 2006-03-21T18:00:00 Last Updated: 2024-08-07T17:12:20.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0437.html - http://www.vupen.com/english/advisories/2006/4502 - http://www.securityfo
edhat.com/support/errata/RHSA-2006-0437.html - http://www.vupen.com/english/advisories/2006/4502 - http://www.securityfocus.com/archive/1/435490/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0579.html - https://usn.ubuntu.com/281-1/ - http://www.osvdb.org/29841 - http://secunia.com/advisories/22875 - http://secunia.com/advisories/21136 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://www.trustix.org/errata/2006/0032/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://secunia.com/advisories/21983 - h
DKSA-2006:123 - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://secunia.com/advisories/21983 - http://www.vmware.com/download/esx/esx-213-200610-patch.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25425 - http://www.debian.org/security/2006/dsa-1097 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://secunia.com/advisories/19955 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10875 - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://www.vmware.com/download/esx/esx-254-200610-patch.html - http://secunia.com/advisories/193
rity/ASA-2006-180.htm - http://www.vmware.com/download/esx/esx-254-200610-patch.html - http://secunia.com/advisories/19357 - http://secunia.com/advisories/21465 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - http://secunia.com/advisories/21045 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://secunia.com/advisories/22417 - http://www.securityfocus.com/bid/17203 - http://secunia.com/advisories/22093 - http://secunia.com/advisories/20671 - http://www.vupen.com/english/advisories/2006/2071 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://www.debian.org/security/2006/
sories/2006/2071 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://www.debian.org/security/2006/dsa-1184 - http://marc.info/?l=linux-netdev&m=114148078223594&w=2
CVE ID: CVE-2006-1344 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTML_FILE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17170 - http://www.coresecurity.com/common/showdoc.php?idx=522&idxseccion=10 - http://www.vupen.com/english/advisories/2006/1084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25349 - http://securityreason.com/secu
glish/advisories/2006/1084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25349 - http://securityreason.com/securityalert/614 - http://www.securityfocus.com/archive/1/428267/100/0/threaded - http://securitytracker.com/id?1015813
CVE ID: CVE-2006-1345 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428056/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25337
CVE ID: CVE-2006-1346 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1595 - http://www.osvdb.org/24016 - http://secunia.com/advisories/19322 - http://www.vupe
://www.exploit-db.com/exploits/1595 - http://www.osvdb.org/24016 - http://secunia.com/advisories/19322 - http://www.vupen.com/english/advisories/2006/1015 - http://www.securityfocus.com/bid/17165 - http://attrition.org/pipermail/vim/2006-April/000698.html
CVE ID: CVE-2006-1347 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1595 - http://www.osvdb.org/24017 - http://secunia.com/advisories/19322 - http://www.vupen.com/english/advisories/2006/1015 - http://www.securityfocus.com/bid/17165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25344 - http://attrition.org/pip
/www.securityfocus.com/bid/17165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25344 - http://attrition.org/pipermail/vim/2006-April/000698.html
CVE ID: CVE-2006-1348 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an error message. NOTE: this issue might be resultant from CVE-2006-1346. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1595 - http://www.osvdb.org/24018 - http://secunia.com/advisories/19322 - http://www.vupen.com/english/advisories/2006/1015 - https://exchan
vdb.org/24018 - http://secunia.com/advisories/19322 - http://www.vupen.com/english/advisories/2006/1015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25343 - http://www.securityfocus.com/bid/17165 - http://attrition.org/pipermail/vim/2006-April/000698.html
CVE ID: CVE-2006-1349 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25525 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://www.securityfocus.com/archive/1/4289
ities/25525 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://www.securityfocus.com/archive/1/428972/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27925 - http://www.securityfocus.com/bid/17149 - http://www.osvdb.org/23968
CVE ID: CVE-2006-1350 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/616 - http://attrition.org/pipermail/vim/2006-March/000626.html - http://www.osvdb.org/24024 - http://www.securityfocus.com/bid/17183 - http://www.vupen.com/english/advisories/2006/1037 - https://exchange.xforce.i
- http://www.securityfocus.com/bid/17183 - http://www.vupen.com/english/advisories/2006/1037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25378 - http://www.securityfocus.com/archive/1/428354/100/0/threaded - http://secunia.com/advisories/19320
CVE ID: CVE-2006-1351 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25347 - http://dev2dev.bea.com/pub/advisory/180 - http://secunia.com/advisories/19310 - http://www.vupen.com/english/advisories/2006/1021 - http://www.securityfocus.com/bid/17166
CVE ID: CVE-2006-1352 State: PUBLISHED Published: 2006-03-22T01:00:00 Last Updated: 2024-08-07T17:12:20.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/183 - http://www.securityfocus.com/bid/17167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25348 - http://securitytracker.com/id?1015790 - http://secunia.com/advisories/19310 - http:
ibmcloud.com/vulnerabilities/25348 - http://securitytracker.com/id?1015790 - http://secunia.com/advisories/19310 - http://www.vupen.com/english/advisories/2006/1021
CVE ID: CVE-2006-1353 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter
parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1431.html - http://www.osvdb.org/24091 - http://secunia.com/advisories/19286 - http://www.osvdb.org/24092 - http://www.osvdb.org/24090 - http://www.nukedx.com/?viewdoc=21 - http://www.osvdb.org/2408
http://www.osvdb.org/24092 - http://www.osvdb.org/24090 - http://www.nukedx.com/?viewdoc=21 - http://www.osvdb.org/24086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25346 - http://securityreason.com/securityalert/608 - http://www.osvdb.org/24085 - http://www.securityfocus.com/archive/1/428355/100/0/threaded - http://www.securityfocus.com/archive/1/428615/100/0/threaded - http://www.osvdb.org/24084 - http://www.securityfocus.com/bid/17174 - http://www.vupen.com/english/advisories/2006/1014 - http://www.osvdb.org/24020 - http://www.osvdb.org/24087 - http://www.osvdb.org/24088 - http://www.osvdb.org/24089 - https://www.exploit-db.com/exploits/1597 - http://archives.neohapsis.com/arc
db.org/24088 - http://www.osvdb.org/24089 - https://www.exploit-db.com/exploits/1597 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html
CVE ID: CVE-2006-1354 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml - ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/25352 - http://secunia.com/advisories/19300 - http
60404-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/25352 - http://secunia.com/advisories/19300 - http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html - http://www.securityfocus.com/bid/17171 - http://secunia.com/advisories/20461 - http://secunia.com/advisories/19405 - http://secunia.com/advisories/19811 - http://www.vupen.com/english/advisories/2006/1016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156 - http://www.freeradius.org/security.html - http://www.debian.org/security/2006/dsa-1089 - http://securitytracker.com/id?1015795 - http://rhn.redhat.com/errata/RHSA-2006-0271.html - http://secunia.com/advisories
http://securitytracker.com/id?1015795 - http://rhn.redhat.com/errata/RHSA-2006-0271.html - http://secunia.com/advisories/19527 - http://www.trustix.org/errata/2006/0020 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:060 - http://secunia.com/advisories/19518
CVE ID: CVE-2006-1355 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files. Additional Analyst Notes: - CVE Program Container: References: - http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20 - http://secunia.com/advisories/19284 - http://forum.avast.com/index.php?topic=19862.0 - http://www.vupen.com/english/advisories/2006/1011 - https://exchange.xforce.ibmcloud.com/vu
om/index.php?topic=19862.0 - http://www.vupen.com/english/advisories/2006/1011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25336 - http://www.securityfocus.com/bid/17158
CVE ID: CVE-2006-1356 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/23/23985-libvc.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25430 - http://www.osvdb.org/23985 - http://secunia.com/advisories/19295 - http://www.securityfocus.com/bid/17237
CVE ID: CVE-2006-1357 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19337 - http://www.securityfocus.com/bid/17175 - http://www.securityfocus.com/archive/1/428318/100/0/threaded - http://securityreason.com/securityalert/611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25393 - http://www.vupen.com/english/advisories/
ecurityalert/611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25393 - http://www.vupen.com/english/advisories/2006/1036 - http://securitytracker.com/id?1015798
CVE ID: CVE-2006-1358 State: PUBLISHED Published: 2006-03-22T02:00:00 Last Updated: 2024-08-07T17:12:20.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1022 - ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip - http://dev2dev.bea.com/pub/advisory/182 - http://secunia.com/advisories/19308 - http://www.securityfocus.com/bid/17164 - http://securitytrac
om/pub/advisory/182 - http://secunia.com/advisories/19308 - http://www.securityfocus.com/bid/17164 - http://securitytracker.com/id?1015791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25345
CVE ID: CVE-2006-1359 State: PUBLISHED Published: 2006-03-23T00:00:00 Last Updated: 2024-08-07T17:12:20.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.computerterrorism.com/research/ct22-03-2006 - http://www.securityfocus.com/archive/1/429088/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1678 - http