Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
am Container: References: - http://www.kb.cert.org/vuls/id/932041 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-012 - http://secunia.com/advisories/24150 - http://www.vupen.com/english/advisories/2007/0581 - http://www.securitytracker.com/id?1017638 - http://www.osvdb.org/31887 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.securityfocus.com/bid/22476 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A157
CVE ID: CVE-2007-0026 State: PUBLISHED Published: 2007-02-13T20:00:00 Last Updated: 2024-08-07T12:03:36.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0580 - http://secunia.com/advisories/24147 - http://www.kb.cert.org/vuls/id/497756 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.osvdb.org/31885 - http://www.securityfocus.com/bid/22
http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.osvdb.org/31885 - http://www.securityfocus.com/bid/22483 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A540 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-011 - http://www.securitytracker.com/id?1017637
CVE ID: CVE-2007-0027 State: PUBLISHED Published: 2007-01-09T22:00:00 Last Updated: 2024-08-07T12:03:36.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31255 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://securitytracker.com/id?1017487 - http://www.securityfocus.com/bid/21856 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.vupen.com/english/advisories/2007/0103 -
56 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.vupen.com/english/advisories/2007/0103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.kb.cert.org/vuls/id/749964 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A119
CVE ID: CVE-2007-0028 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-30.html - http://www.os
- CVE Program Container: References: - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-30.html - http://www.osvdb.org/31249 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://www.securityfocus.com/bid/21952 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A768 - http://www.fortinet.com/FortiGuardCenter/advisory/FGA-2007-01.html - http://www.kb.cert.org/vuls/id/493185 - http://www.vupen.com/english/advisories/2007/0103 - http://secunia.com/advisories/23676 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/
3676 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://securitytracker.com/id?1017485
CVE ID: CVE-2007-0029 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1102 - http://securitytracker.com/id?1017487 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://
%3A1102 - http://securitytracker.com/id?1017487 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.securityfocus.com/bid/21877 - http://www.vupen.com/english/advisories/2007/0103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.osvdb.org/31256
CVE ID: CVE-2007-0030 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://www.osvdb.org/31257 - http://securitytracker.com/id?1017487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
//securitytracker.com/id?1017487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A323 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.kb.cert.org/vuls/id/302836 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=460 - http://www.vupen.com/english/advisories/2007/0103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.securityfocus.com/bid/21925
CVE ID: CVE-2007-0031 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=461 - http://securitytracker.com/id?1017487 - http://www.securityfocus.com/archive/1/4
ce/vulnerabilities/display.php?id=461 - http://securitytracker.com/id?1017487 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.osvdb.org/31258 - http://www.securityfocus.com/bid/21922 - http://www.vupen.com/english/advisories/2007/0103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.kb.cert.org/vuls/id/625532 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A753
CVE ID: CVE-2007-0032 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0033 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0104 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://www.securityfocus.com/bid/21931 - http://secunia.com/advisories/23674 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://securitytracker.com/id?1017488 - https://doc
674 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://securitytracker.com/id?1017488 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003 - http://www.osvdb.org/31252 - http://www.kb.cert.org/vuls/id/476900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A516 - http://www.securityfocus.com/archive/1/457274/100/0/threaded
CVE ID: CVE-2007-0034 State: PUBLISHED Published: 2007-01-09T23:00:00 Last Updated: 2024-08-07T12:03:36.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31254 - http://www.vupen.com/english/advisories/2007/0104 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://secunia.com/advisories/2
om/english/advisories/2007/0104 - http://www.us-cert.gov/cas/techalerts/TA07-009A.html - http://secunia.com/advisories/23674 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://securitytracker.com/id?1017488 - http://www.securityfocus.com/bid/21936 - http://www.kb.cert.org/vuls/id/271860 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003 - http://www.securityfocus.com/archive/1/456589/100/0/threaded - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.computerterrorism.com/research/ct09-01-2007.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A153
CVE ID: CVE-2007-0035 State: PUBLISHED Published: 2007-05-08T22:00:00 Last Updated: 2024-08-07T12:03:37.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securityfocus.com/bid/23804 - http://www.securitytracker.com/id?1018013 - http://www.securityfocus.com/a
ed - http://www.securityfocus.com/bid/23804 - http://www.securitytracker.com/id?1018013 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1709 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024 - http://www.osvdb.org/34387 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.kb.cert.org/vuls/id/260777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1737
CVE ID: CVE-2007-0036 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0037 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0038 State: PUBLISHED Published: 2007-03-30T20:00:00 Last Updated: 2024-08-07T12:03:36.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, the
as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-093A.html - http://www.vupen.com/english/advisories/2007/1215 - http://securityreason.com/securityalert/2542 - http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0470.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1854 - http://www.securityfocus.com/archive/1/464342/100/0/threaded - http://www.kb.cert.org/vuls/id/191609 - http://www.securityfocus.com/archive/1/466186/100/200
/1/464342/100/0/threaded - http://www.kb.cert.org/vuls/id/191609 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - http://secunia.com/advisories/24659 - http://www.us-cert.gov/cas/techalerts/TA07-089A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33301 - http://www.securityfocus.com/archive/1/464460/100/100/threaded - http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.us-cert.gov/cas/techalerts/TA07-100A.html - http://www.osvdb.org/33629 - http://www.securityfocus.com/archive/1/464459/100/100/threaded - http://www.securityf
tml - http://www.osvdb.org/33629 - http://www.securityfocus.com/archive/1/464459/100/100/threaded - http://www.securityfocus.com/archive/1/466186/100/200/threaded - http://www.securityfocus.com/archive/1/464269/100/0/threaded - http://www.securityfocus.com/archive/1/464340/100/0/threaded - http://www.securityfocus.com/archive/1/464339/100/0/threaded
CVE ID: CVE-2007-0039 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:03:37.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468047/100
tion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468047/100/0/threaded - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018015 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 - http://www.osvdb.org/34390 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1593 - http://secunia.com/advisories/25183 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33888 - http://www.vupen.com/english/ad
techalerts/TA07-128A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33888 - http://www.vupen.com/english/advisories/2007/1711 - http://www.determina.com/security.research/vulnerabilities/exchange-ical-modprops.html - http://www.securityfocus.com/bid/23808 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063232.html
CVE ID: CVE-2007-0040 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T12:03:36.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes." Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securityfocus.com/bid/24800 - https://oval.cisecurity.org/r
.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securityfocus.com/bid/24800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2012 - http://www.iss.net/threats/267.html - http://www.securitytracker.com/id?1018355 - http://secunia.com/advisories/26002 - http://osvdb.org/35960 - http://www.kb.cert.org/vuls/id/487905 - http://www.vupen.com/english/advisories/2007/2481 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-039
CVE ID: CVE-2007-0041 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T12:03:37.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 - http://www.vupen.com/english/advis
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 - http://www.vupen.com/english/advisories/2007/2482 - http://osvdb.org/35954 - http://secunia.com/advisories/26003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://www.securityfocus.com/bid/24778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34637 - http://www.securitytracker.com/id?1018356
CVE ID: CVE-2007-0042 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T12:03:36.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability." Additional Analyst Notes: - CVE Program Container:
acter within .NET strings, aka "Null Byte Termination Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 - http://www.vupen.com/english/advisories/2007/2482 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2070 - http://secunia.com/advisories/26003 - http://security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Injection_Vulnerabilities.pdf - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://www.securitytracker.com/id?1018356
CVE ID: CVE-2007-0043 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T12:03:36.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-0
tgart.de/bugtraq/2007/07/msg00254.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 - http://www.vupen.com/english/advisories/2007/2482 - http://osvdb.org/35956 - http://secunia.com/advisories/26003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34639 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://www.securitytracker.com/id?1018356 - http://www.securityfocus.com/bid/24811
CVE ID: CVE-2007-0044 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T12:03:36.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21858 - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - h
//www.securityfocus.com/bid/21858 - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://secunia.com/advisories/23882 - http://www.securityfocus.com/archive/1/455801/100/0/threaded - http://www.vupen.com/english/advisories/2007/0032 - http://securityreason.com/securityalert/2090 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html - http://secunia.com/advisories/23812 - http://securitytracker.com/id?1017469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31266 - http://secunia.com/advisories/29065 - http://security.gentoo.org/glsa/gls
ge.xforce.ibmcloud.com/vulnerabilities/31266 - http://secunia.com/advisories/29065 - http://security.gentoo.org/glsa/glsa-200701-16.xml - http://www.redhat.com/support/errata/RHSA-2008-0144.html - http://www.wisec.it/vulns.php?page=9
CVE ID: CVE-2007-0045 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T12:03:37.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily
via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0021.html - http://secunia.com/advisories/23691 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - https://rhn.redhat.com/errata/RHSA-2007-0017.html - http://www.securityfocus.com/bid/21858 - http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://www.securityfocus.com/archi