Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/TechSupport/Document.jsp?objectID=c00771742 - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://www.vupen.com/english/advisories/2007/0718 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://secunia.com/advisories/24320 - http://secunia.com/advisories/25588 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://www.securityfocus.com/archive/1/461076/100/0/threaded - http://www.hardened-php.net/advisory_032007.142.html - ht
http://www.securityfocus.com/archive/1/461076/100/0/threaded - http://www.hardened-php.net/advisory_032007.142.html - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - http://secunia.com/advisories/24333 - http://osvdb.org/33812 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 -
svdb.org/33812 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://secunia.com/advisories/24455 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html
CVE ID: CVE-2007-0997 State: PUBLISHED Published: 2007-09-18T19:00:00Z Last Updated: 2024-09-17T02:36:04.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified vectors related to a potentially dropped ipipe lock during a race between two pipe readers. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2006/7/17/140 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.18
CVE ID: CVE-2007-0998 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:43:21.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33085 - http://secunia.com/advisories/51413 - http
r: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33085 - http://secunia.com/advisories/51413 - http://www.securityfocus.com/bid/22967 - http://www.vupen.com/english/advisories/2007/1021 - http://www.vupen.com/english/advisories/2007/1019 - http://rhn.redhat.com/errata/RHSA-2007-0114.html - http://osvdb.org/34304 - http://www.vupen.com/english/advisories/2007/1020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10486 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://fedoranews.org/cms/node/2802 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://fedoranews.org/cm
rg/cms/node/2802 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://fedoranews.org/cms/node/2803 - http://secunia.com/advisories/24575 - http://www.securitytracker.com/id?1017764 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2007-0999 State: PUBLISHED Published: 2007-03-10T19:00:00 Last Updated: 2024-08-07T12:43:21.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:058 - http://www.ubuntu.com/usn/usn-434-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10944 - http://www.redhat.com/support/errata/RHSA-2007-0087.html
CVE ID: CVE-2007-10001 State: PUBLISHED Published: 2023-01-05T11:26:20.297Z Last Updated: 2025-04-10T14:16:20.559Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: web-cyradm Problem Types: CWE-89 Description: A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217449 - https://vuldb.
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217449 - https://vuldb.com/?ctiid.217449 - https://github.com/web-cyradm/web-cyradm/commit/3e8f0717f133907bb6a09cb674b05c5f273da3e1
CVE ID: CVE-2007-10002 State: PUBLISHED Published: 2023-01-08T09:18:54.836Z Last Updated: 2025-04-09T14:43:42.572Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: web-cyradm Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/login_password/LANG leads to sql injection. The attack may be launched remotely. The name of the patch is 2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217640. Additional
f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217640. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217640 - https://vuldb.com/?ctiid.217640 - https://github.com/web-cyradm/web-cyradm/commit/2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f
CVE ID: CVE-2007-10003 State: PUBLISHED Published: 2023-10-29T17:00:06.459Z Last Updated: 2024-09-06T19:35:44.204Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: The Hackers Diet Plugin Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. Upgrading to version 0.9.7b is able to address this issue. The patch is named 7dd8acf7cd8442609840037121074425d363b69
y. Upgrading to version 0.9.7b is able to address this issue. The patch is named 7dd8acf7cd8442609840037121074425d363b694. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-243803. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243803 - https://vuldb.com/?ctiid.243803 - https://github.com/wp-plugins/the-hackers-diet/commit/7dd8acf7cd8442609840037121074425d363b694 - https://github.com/wp-plugins/the-hackers-diet/releases/tag/0.9.7b
CVE ID: CVE-2007-1000 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:43:22.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22904 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10015 - http://www.kb.cert.org/vuls/id/920689 - http://secunia.com/advisories/24901 - http://www.mandriva.com/security/advisor
- http://www.kb.cert.org/vuls/id/920689 - http://secunia.com/advisories/24901 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://bugzilla.kernel.org/show_bug.cgi?id=8134 - http://secunia.com/advisories/24777 - http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html - https://issues.rpath.com/browse/RPL-1153 - http://www.wslabi.com/wabisabilabi/initPublishedBid.do? - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.2 - http://www.ubuntu.com/usn/usn-489-1 - http://secunia.com/advisories/24518 - http://www.vupen.com/english/advisories/2007/0907 - http://secunia.com/advisories/25099 - http://www.securityfocus.com/archive/1/471457 - http://fedor
dvisories/2007/0907 - http://secunia.com/advisories/25099 - http://www.securityfocus.com/archive/1/471457 - http://fedoranews.org/cms/node/2787 - http://www.redhat.com/support/errata/RHSA-2007-0169.html - http://secunia.com/advisories/25080 - http://www.osvdb.org/33025 - http://secunia.com/advisories/24493 - http://fedoranews.org/cms/node/2788 - http://www.ubuntu.com/usn/usn-486-1 - http://secunia.com/advisories/25691 - http://secunia.com/advisories/26139 - http://secunia.com/advisories/26133
CVE ID: CVE-2007-1001 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T12:43:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053 - http://secunia.com/a
p://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053 - http://secunia.com/advisories/25056 - http://secunia.com/advisories/25151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33453 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179 - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.redhat.com/support/errata/RHSA-2007-0162.html - http://us2.php.net/releases/4_4_7.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.
- http://us2.php.net/releases/4_4_7.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.securityfocus.com/archive/1/464957/100/0/threaded - http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1 - http://secunia.com/advisories/24909 - http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 - http://secunia.com/advisories/24945 - https://issues.rpath.com/browse/RPL-1268 - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://secunia.com/advisories/24924 - http://www.securityfocus.com/bid/23357 - http:/
e.com/article.html?artnum=306172 - http://secunia.com/advisories/24924 - http://www.securityfocus.com/bid/23357 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://www.vupen.com/english/advisories/2007/1269 - http://secunia.com/advisories/24965 - http://www.securityfocus.com/bid/25159 - http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup - http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/24814 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://secunia.com/advisories/26235
007_32_php.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://secunia.com/advisories/26235 - http://www.redhat.com/support/errata/RHSA-2007-0153.html
CVE ID: CVE-2007-1002 State: PUBLISHED Published: 2007-03-21T22:00:00 Last Updated: 2024-08-07T12:43:22.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24651 - https://rhn.redhat.com/errata/RHSA-2007-0158.html - http://www.securitytracker.com/id?1017808 - http://security.gentoo.org/glsa/glsa
redhat.com/errata/RHSA-2007-0158.html - http://www.securitytracker.com/id?1017808 - http://security.gentoo.org/glsa/glsa-200706-02.xml - http://www.securityfocus.com/bid/23073 - http://secunia.com/advisories/25880 - http://www.securityfocus.com/archive/1/464820/30/7170/threaded - http://www.debian.org/security/2007/dsa-1325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33106 - http://www.securityfocus.com/archive/1/463406/100/0/threaded - http://secunia.com/advisories/24234 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10100 - http://secunia.com/secunia_research/2007-44/advisory/ - http://www.ubuntu.com/usn/usn-442-1 - http://secunia.com/ad
00 - http://secunia.com/secunia_research/2007-44/advisory/ - http://www.ubuntu.com/usn/usn-442-1 - http://secunia.com/advisories/25102 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:070 - http://www.vupen.com/english/advisories/2007/1058 - http://secunia.com/advisories/25551 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/24668
CVE ID: CVE-2007-1003 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:43:22.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=503 - http://www.securityfocus.com/bid/23284 - http://secunia.com/advisories/24745 - https://oval.ci
ties/display.php?id=503 - http://www.securityfocus.com/bid/23284 - http://secunia.com/advisories/24745 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1980 - http://secunia.com/advisories/29622 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://secunia.com/advisories/24771 - http://secunia.com/advisories/24770 - http://secunia.com/advisories/25006 - http://secunia.com/advisories/24756 - http://www.redhat.com/support/errata/RHSA-2007-0126.html - http://www.securityfocus.com/bid/23300 - http://security.gentoo.org/glsa/glsa-200705-10.xml - http://www.ubuntu.com/usn/usn-448-1 - http://www.mandriva.com/security/advisories
y.gentoo.org/glsa/glsa-200705-10.xml - http://www.ubuntu.com/usn/usn-448-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 - http://secunia.com/advisories/24758 - http://www.securitytracker.com/id?1017857 - http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm - http://secunia.com/advisories/25195 - http://rhn.redhat.com/errata/RHSA-2007-0125.html - http://secunia.com/advisories/24741 - http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html - http://secunia.com/advisories/24791 - http://www.novell.com/linux/security/advisories/2007_27_x.html - http://www.redhat.com/support/errata/RHSA-2007-0127.html - http://www.debian.org/security/2007/dsa-1294 -
07_27_x.html - http://www.redhat.com/support/errata/RHSA-2007-0127.html - http://www.debian.org/security/2007/dsa-1294 - http://secunia.com/advisories/24765 - http://secunia.com/advisories/25216 - http://www.securityfocus.com/archive/1/464686/100/0/threaded - http://www.securityfocus.com/archive/1/464816/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33424 - http://www.vupen.com/english/advisories/2007/1548 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 - http://www.vupen.com/english/advisories/2007/1217 - http://www.openbsd.org/errata40.html#011_xorg - https://issues.rpath.com/browse/RPL-1213 - http://secunia.com/advisories/25004 - http://secunia.
rrata40.html#011_xorg - https://issues.rpath.com/browse/RPL-1213 - http://secunia.com/advisories/25004 - http://secunia.com/advisories/25305 - http://secunia.com/advisories/24772 - http://www.openbsd.org/errata39.html#021_xorg - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9798 - http://issues.foresightlinux.org/browse/FL-223 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:079
CVE ID: CVE-2007-1004 State: PUBLISHED Published: 2007-02-19T18:00:00 Last Updated: 2024-08-07T12:43:21.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox might allow remote attackers to conduct spoofing and phishing attacks by writing to an about:blank tab and overlaying the location bar. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24153 - http://www.securityfocus.com/archive/1/460369/100/0/threaded - http://www.securityfocus.com/archive/1/460617/100/0/threaded - http://www.securityfocus.com/archive/1/460412/100/0/threaded - http://www.securityfocus.com/bid/22601 - http://osvdb.org/33769 - https://exchange.xforc
chive/1/460412/100/0/threaded - http://www.securityfocus.com/bid/22601 - http://osvdb.org/33769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32580 - http://securityreason.com/securityalert/2264 - http://osvdb.org/33255
CVE ID: CVE-2007-1005 State: PUBLISHED Published: 2007-03-02T21:00:00 Last Updated: 2024-08-07T12:43:21.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0776 - http://www.securityfocus.com/bid/22743 - http://www.osvdb.org/32290 - http://supportconnectw.ca.com/public/ca_common
6 - http://www.securityfocus.com/bid/22743 - http://www.osvdb.org/32290 - http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp - http://secunia.com/advisories/24309 - http://www.securitytracker.com/id?1017706 - http://www.securityfocus.com/archive/1/461567/100/100/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484
CVE ID: CVE-2007-1006 State: PUBLISHED Published: 2007-02-20T00:00:00 Last Updated: 2024-08-07T12:43:22.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:044 - http://secunia.com/advisories/25119 - http://fedoranews.org/cms/node/2682 - http://mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html - http://labs.musecurity.com/advis
cms/node/2682 - http://mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html - http://labs.musecurity.com/advisories/MU-200702-01.txt - http://www.osvdb.org/31939 - http://www.securityfocus.com/bid/22613 - http://secunia.com/advisories/24271 - http://secunia.com/advisories/24379 - http://www.novell.com/linux/security/advisories/2007_9_sr.html - http://security.gentoo.org/glsa/glsa-200703-25.xml - http://secunia.com/advisories/24228 - http://www.debian.org/security/2007/dsa-1262 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11642 - http://secunia.com/advisories/24680 - http://fedoranews.org/cms/node/2683 - http://www.redhat.com/support/errat
A11642 - http://secunia.com/advisories/24680 - http://fedoranews.org/cms/node/2683 - http://www.redhat.com/support/errata/RHSA-2007-0087.html - http://secunia.com/advisories/24229 - http://www.ekiga.org/index.php?rub=10&archive=1 - http://secunia.com/advisories/24194 - http://www.securitytracker.com/id?1017673 - http://www.vupen.com/english/advisories/2007/0655 - http://www.ubuntu.com/usn/usn-426-1
CVE ID: CVE-2007-1007 State: PUBLISHED Published: 2007-02-20T17:00:00 Last Updated: 2024-08-07T12:43:21.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25119 - http://secunia.com/advisories/24271 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=229266 - http://secunia.com/advisories/24284 - http://secunia.com/a
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=229266 - http://secunia.com/advisories/24284 - http://secunia.com/advisories/24379 - http://www.novell.com/linux/security/advisories/2007_9_sr.html - http://www.debian.org/security/2007/dsa-1262 - http://secunia.com/advisories/24185 - http://www.redhat.com/support/errata/RHSA-2007-0086.html - http://osvdb.org/32083 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11776 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:045 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.ubuntu.com/usn/usn-426-1
CVE ID: CVE-2007-1008 State: PUBLISHED Published: 2007-02-20T00:00:00 Last Updated: 2024-08-07T12:43:22.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or man-in-the-middle attacks for exploitation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460544/100/0/threaded - http://osvdb.org/33742 - https://oval.cisecurity.org/repository
/www.securityfocus.com/archive/1/460544/100/0/threaded - http://osvdb.org/33742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16978 - http://www.securityfocus.com/bid/22615 - http://securityreason.com/securityalert/2278