Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s://exchange.xforce.ibmcloud.com/vulnerabilities/19920 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9310 - http://secunia.com/advisories/14792 - http://www.vupen.com/english/advisories/2005/0305 - http://www.securityfocus.com/archive/1/394797 - http://www.redhat.com/support/errata/RHSA-2005-405.html
CVE ID: CVE-2005-0525 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:13:54.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-729 - http://securitytracker.com/id?1013619 - http://www.redhat.com/support/errata/RHSA-2005-406.html - http://www
5/dsa-729 - http://securitytracker.com/id?1013619 - http://www.redhat.com/support/errata/RHSA-2005-406.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.osvdb.org/15184 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://secunia.com/advisories/14792 - http://www.vupen.com/english/advisories/2005/0305 - http://www.debian.org/security/2005/dsa-708 - http://www.securityfocus.com/archive/1/394797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11703 - http://www.redhat.com/support/errata/RHSA-2005-405.html
CVE ID: CVE-2005-0526 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pmpshow.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013277 - http://marc.info/?l=bugtraq&m=110917702708589&w=2 - http://marc.info/?l=bugtraq&m=110917641105486&w=2 - http://marc.info/?l=bugtraq&m=11091776
gtraq&m=110917702708589&w=2 - http://marc.info/?l=bugtraq&m=110917641105486&w=2 - http://marc.info/?l=bugtraq&m=110917768511595&w=2
CVE ID: CVE-2005-0527 State: PUBLISHED Published: 2005-02-25T05:00:00 Last Updated: 2024-08-07T21:13:54.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling." Additional Analyst Notes: - CVE Program Container: References: - http://www.mikx.de/?p=11 - http://www.mozilla.org/security/announce/mfsa2005-27.html - http://securitytracker.com/id?1013301 - http://marc.info/?l=bugtraq&m=110935267500395&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
http://marc.info/?l=bugtraq&m=110935267500395&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031
CVE ID: CVE-2005-0528 State: REJECTED Published: 2006-06-01T00:00:00Z Last Updated: 2024-09-16T19:05:20.765Z Description: No description available.
CVE ID: CVE-2005-0529 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://linux.bkbits.n
/errata/RHSA-2005-366.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://linux.bkbits.net:8080/linux-2.6/cset%404201818eC6aMn0x3GY_9rw3ueb2ZWQ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8994 - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html
CVE ID: CVE-2005-0530 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://linux.bkbits.net:8080/linux-2.6/cset%40420181322LZmhPTewcCOLkubGwOL3w - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://marc.info/?l=full-disclosure&m=110
6.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10960
CVE ID: CVE-2005-0531 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://linux.bkbits.net:8080/linux-2.6/gnupatch%404208e1fcfccuD-eH2OGM5mBhihmQ3A - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 - http://distro.conectiva.com.br/atualizacoes/index.
hihmQ3A - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10095 - http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html
CVE ID: CVE-2005-0532 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 -
w.novell.com/linux/security/advisories/2005_18_kernel.html - http://marc.info/?l=full-disclosure&m=110846727602817&w=2 - http://linux.bkbits.net:8080/linux-2.6/cset%4042018227TkNpHlX6BefnItV_GqMmzQ - http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html
CVE ID: CVE-2005-0533 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution - http://securitytracker.com/id?1013290 - http://securitytracker.com/
SAPI+ARJ+parsing+could+allow+Remote+Code+execution - http://securitytracker.com/id?1013290 - http://securitytracker.com/id?1013289 - http://xforce.iss.net/xforce/alerts/id/189 - http://secunia.com/advisories/14396 - http://www.securityfocus.com/bid/12643
CVE ID: CVE-2005-0534 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013260 - http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml - http://sourceforge.net/project/shownotes.php?release_id=307067 - http://secunia.com/advisories/14360
CVE ID: CVE-2005-0535 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013260 - http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml - http://sourceforge.net/project/shownotes.php?release_id=307067 - http://secunia.com/advisories/14360
CVE ID: CVE-2005-0536 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013260 - http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml - http://sourceforge.net/project/shownotes.php?release_id=307067 - http://secunia.com/advisories/14360
CVE ID: CVE-2005-0537 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013268 - http://secunia.com/advisories/14369 - http://marc.info/?l=bugtraq&m=110910607229970&w=2
CVE ID: CVE-2005-0538 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14373 - http://sourceforge.net/project/shownotes.php?release_id=307518
CVE ID: CVE-2005-0539 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:13:54.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14377 - http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html
CVE ID: CVE-2005-0540 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:21:05.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14378 - http://marc.info/?l=full-disclosure&m=110924450827137&w=2 - http://www.cirt.net/advisories/alterpath_disclosure.shtml - http://www.osvdb.org/14073
CVE ID: CVE-2005-0541 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:21:05.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14378 - http://marc.info/?l=full-disclosure&m=110924450827137&w=2 - http://www.cirt.net/advisories/alterpath_console.shtml - http://www.osvdb.org/14075
CVE ID: CVE-2005-0542 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:21:05.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14074 - http://secunia.com/advisories/14378 - http://marc.info/?l=full-disclosure&m=110924450827137&w=2 - http://www.cirt.net/advisories/alterpath_privesc.shtml
CVE ID: CVE-2005-0543 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:21:05.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14382 - https://exchange.xforce.ibm
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19462 - http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408 - http://www.securityfocus.com/bid/12644 - http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml - http://marc.info/?l=bugtraq&m=110929725801154&w=2
CVE ID: CVE-2005-0544 State: PUBLISHED Published: 2005-02-24T05:00:00 Last Updated: 2024-08-07T21:21:05.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP erro
2) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14382 - http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408 - http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml
CVE ID: CVE-2005-0545 State: PUBLISHED Published: 2005-02-25T05:00:00 Last Updated: 2024-08-07T21:21:05.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391332 - http://www.securityfocus.com/bid/12641 - http://marc.info/?l=bugtraq&m=110935549821930&w=2
CVE ID: CVE-2005-0546 State: PUBLISHED Published: 2005-02-25T05:00:00 Last Updated: 2024-08-07T21:21:05.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674 - http://secunia.com/advisories/14383 - http://marc.info/?l=bugt
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674 - http://secunia.com/advisories/14383 - http://marc.info/?l=bugtraq&m=110972236203397&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:051 - http://securitytracker.com/id?1013278 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 - http://security.gentoo.org/glsa/glsa-200502-29.xml - http://www.securityfocus.com/archive/1/430294/100/0/threaded - http://www.securityfocus.com/bid/12636 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 - http://bugs.gentoo.org/show_bug.cgi?id=82404 - http://www.redhat.com/support/errata/RHSA-2005-408.html
CVE ID: CVE-2005-0547 State: PUBLISHED Published: 2005-02-25T05:00:00 Last Updated: 2024-08-07T21:21:05.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110927245211549&w=2 - http://www.securityfocus.com/bid/12651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19467 - http://marc.info/?l=bugtraq&m=110927245211549&w=2
CVE ID: CVE-2005-0548 State: PUBLISHED Published: 2005-03-09T05:00:00 Last Updated: 2024-08-07T21:21:05.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111205163531628&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1
CVE ID: CVE-2005-0549 State: PUBLISHED Published: 2005-03-09T05:00:00 Last Updated: 2024-08-07T21:21:05.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111205163531628&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1
CVE ID: CVE-2005-0550 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4397 - https://oval.cisecurity.org/repository/search/definitio
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4397 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4832 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1271
CVE ID: CVE-2005-0551 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822 - http://www.idefense.com/application/poi/display?id=230&type=
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822 - http://www.idefense.com/application/poi/display?id=230&type=vulnerabilities - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A266 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3544
CVE ID: CVE-2005-0553 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/774338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695 - ht
vulnerabilities/19831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695 - http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities - http://secunia.com/advisories/14922/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4874 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html - https://oval.cisecurity.org/repository/searc
.oval%3Adef%3A3100 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752