Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3347 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:25.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to execute arbitrary SQL commands via the read parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43917 - http://www.securityfocus.com/bid/30305 - http://www.securityfocus.com/archive/1/494551/100/0/threaded - http://securityreason.com/securityalert/4046 - http://www.vupen.com/english/advisories/2008/2162/refer
/100/0/threaded - http://securityreason.com/securityalert/4046 - http://www.vupen.com/english/advisories/2008/2162/references - http://secunia.com/advisories/31189
CVE ID: CVE-2008-3348 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the year parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43916 - http://www.securityfocus.com/archive/1/494551/100/0/threaded - http://securityreason.com/securityalert/4046 - http://www.vupen.com/english/advisori
m/archive/1/494551/100/0/threaded - http://securityreason.com/securityalert/4046 - http://www.vupen.com/english/advisories/2008/2162/references - http://secunia.com/advisories/31189
CVE ID: CVE-2008-3349 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160. Additional Analyst Notes: - CVE Program Container: References: - http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml - http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml - http://now.ne
w.netapp.com/NOW/products/cpc/cpc0807-01.shtml - http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml - http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44265 - http://www.kb.cert.org/vuls/id/329772
CVE ID: CVE-2008-3350 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43957 - http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189
://exchange.xforce.ibmcloud.com/vulnerabilities/43957 - http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189 - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - http://secunia.com/advisories/31197 - http://www.vupen.com/english/advisories/2008/2166
CVE ID: CVE-2008-3351 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4053 - http://secunia.com/advisories/31205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43982 - https://www.exploit-db.com/exploits/6125
CVE ID: CVE-2008-3352 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6128 - http://secunia.com/advisories/31214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43989 - http://securityreason.com/securityalert/4052
CVE ID: CVE-2008-3353 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature. Additional Analyst Notes: - CVE Program Container: References: - http://puresw.com/kb/idx.php/8/025/article/Changelog.html - http://secunia.com/advisories/31217 - http://www.securityfocus.com/bid/30367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43985
CVE ID: CVE-2008-3354 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3
d party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43969 - http://www.securityfocus.com/bid/30331/exploit
CVE ID: CVE-2008-3355 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31234 - http://www.securityfocus.com/bid/30368 - http://securityreason.com/securityalert/4047 - https://www.exploit-db.com/exploits/6132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43991
CVE ID: CVE-2008-3356 State: PUBLISHED Published: 2008-08-05T19:20:00 Last Updated: 2024-08-07T09:37:26.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.ingres.com/support/security-alert-080108.php - http://www.vupen.com/english/advisories/2008/2292 - http:/
: - http://www.ingres.com/support/security-alert-080108.php - http://www.vupen.com/english/advisories/2008/2292 - http://secunia.com/advisories/31398 - http://securitytracker.com/id?1020613 - http://www.vupen.com/english/advisories/2008/2313 - http://secunia.com/advisories/31357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44177 - http://www.securityfocus.com/archive/1/495177/100/0/threaded - http://www.securityfocus.com/bid/30512 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=731
CVE ID: CVE-2008-3357 State: PUBLISHED Published: 2008-08-05T19:20:00 Last Updated: 2024-08-07T09:37:26.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020614 - http://www.ingres.com/support/security-alert-080108.php - http://www.vupen.com/english/advisories/2008/2292 - http://labs.idefense.com/intelligence/vulner
rity-alert-080108.php - http://www.vupen.com/english/advisories/2008/2292 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733 - http://secunia.com/advisories/31398 - http://www.vupen.com/english/advisories/2008/2313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44181 - http://secunia.com/advisories/31357 - http://www.securityfocus.com/archive/1/495177/100/0/threaded - http://www.securityfocus.com/bid/30512 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989
CVE ID: CVE-2008-3358 State: PUBLISHED Published: 2009-01-28T18:00:00 Last Updated: 2024-08-07T09:37:26.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URI, which causes the XSS payload to be reflected in a text/plain document. Additional Analyst Notes: - CVE Program Container: References: - http://service.sap.com/sap/support/notes/1235253 - http://secunia.com/advisories/33685 - http://www.securityfocus.com/archive/1/500415/100/0/threaded - http://www.vupen.com/english/adv
a.com/advisories/33685 - http://www.securityfocus.com/archive/1/500415/100/0/threaded - http://www.vupen.com/english/advisories/2009/0255 - http://osvdb.org/51627 - http://www.securitytracker.com/id?1021638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48237 - http://www.securityfocus.com/bid/33465 - http://www.csnc.ch/misc/files/advisories/CVE-2008-3358.txt
CVE ID: CVE-2008-3359 State: PUBLISHED Published: 2008-07-29T18:00:00 Last Updated: 2024-08-07T09:37:26.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44143 - http://www.vupen.com/english/advisories/2008/2213
CVE ID: CVE-2008-3360 State: PUBLISHED Published: 2008-07-29T18:00:00 Last Updated: 2024-08-07T09:37:26.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6238 - https://www.exploit-db.com/exploits/6103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43876 - https://www.exploit-db.com/exploits/6116 - http://www.securitytracker.com/id?1020521 - http://securi
erabilities/43876 - https://www.exploit-db.com/exploits/6116 - http://www.securitytracker.com/id?1020521 - http://securityreason.com/securityalert/4058 - http://www.vupen.com/english/advisories/2008/2120/references - http://www.securityfocus.com/bid/30317 - https://www.exploit-db.com/exploits/6121
CVE ID: CVE-2008-3361 State: PUBLISHED Published: 2008-07-29T18:00:00 Last Updated: 2024-08-07T09:37:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44147 - https://www.exploit-db.com/exploits/6227 - http://www.securityfocus.com/bid/30356 - https://www.exploit-db.com/exploits/6118 - http://securityreason.com/securityalert/4059
CVE ID: CVE-2008-3362 State: PUBLISHED Published: 2008-07-30T16:03:00 Last Updated: 2024-08-07T09:37:26.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4060 - http://www.securityfocus.com/bid/30365 - https://www.exploit-db.com/exploits
p://securityreason.com/securityalert/4060 - http://www.securityfocus.com/bid/30365 - https://www.exploit-db.com/exploits/6127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43987
CVE ID: CVE-2008-3363 State: PUBLISHED Published: 2008-07-30T16:03:00 Last Updated: 2024-08-07T09:37:26.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the include parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6149 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8.5 - http://www.vupen.com/english/advisories/2008/2208/references - http://www.securityfocus.com/archive/1/494496/100/0/threaded - https://ex
.com/english/advisories/2008/2208/references - http://www.securityfocus.com/archive/1/494496/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43865 - http://secunia.com/advisories/30987 - http://securityreason.com/securityalert/4056 - http://www.securityfocus.com/bid/30150
CVE ID: CVE-2008-3364 State: PUBLISHED Published: 2008-07-30T16:03:00 Last Updated: 2024-08-07T09:37:26.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security (CSM) 3.5 and 3.6; and Worry-Free Business Security (WFBS) 5.0 allows remote attackers to execute arbitrary code via a long string in the Server property, and possibly other properties. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: -
ly other properties. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31440 - http://www.vupen.com/english/advisories/2008/2220/references - http://www.securityfocus.com/bid/30407 - http://secunia.com/advisories/31277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44042 - http://www.securitytracker.com/id?1020569 - https://www.exploit-db.com/exploits/6152 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1037899&id=EN-1037899 - http://securityreason.com/securityalert/4061
CVE ID: CVE-2008-3365 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31239 - http://www.securityfocus.com/archive/1/494817/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44031 - http://securityreason.com/securityalert/4062 - https://www.exploit-db.com
ge.xforce.ibmcloud.com/vulnerabilities/44031 - http://securityreason.com/securityalert/4062 - https://www.exploit-db.com/exploits/6150 - http://www.pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch - http://www.vupen.com/english/advisories/2008/2207/references - http://www.securityfocus.com/bid/30397
CVE ID: CVE-2008-3366 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44021 - http://www.vupen.com/english/advisories/2008/2214/references - https://www.exploit-db.com/exploits/6146
CVE ID: CVE-2008-3367 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31272 - http://depo2.nm.ru/WebWiz_Rich_Text_Editor_v4.02_XSS.txt - http://www.securityfocus.com/archive/1/494822/100/0/threaded - http://securityreason.com/securityalert/4055 - http://www.securityfocus.com/bid/30408 - http://www
4822/100/0/threaded - http://securityreason.com/securityalert/4055 - http://www.securityfocus.com/bid/30408 - http://www.vupen.com/english/advisories/2008/2210/references
CVE ID: CVE-2008-3368 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2206/references - http://securityreason.com/securityalert/4064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44051 - http://www.securityfocus.com/bid/30412 - http://secunia.com/advisories/31274 - https://ww
ud.com/vulnerabilities/44051 - http://www.securityfocus.com/bid/30412 - http://secunia.com/advisories/31274 - https://www.exploit-db.com/exploits/6153
CVE ID: CVE-2008-3369 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.viart.com/another_critical_sql_injection_security_fix_for_version_3_5.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44045 - http://secunia.com/advisories/31275 - http://securityreason.com/securityalert/4065 - http://www.vupen.com/english/advisories/2008/2205/references - htt
1275 - http://securityreason.com/securityalert/4065 - http://www.vupen.com/english/advisories/2008/2205/references - http://www.securityfocus.com/archive/1/494839/100/0/threaded - http://www.gulftech.org/?node=research&article_id=00118-07292008 - https://www.exploit-db.com/exploits/6154 - http://www.securityfocus.com/bid/30409
CVE ID: CVE-2008-3370 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote attackers to execute arbitrary SQL commands via the user (user name) field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31215 - http://www.vupen.com/english/advisories/2008/2219/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43981 - http://marc.info/?l=full-disclosure&m=121684757516717&w=2 - http://www.securityfocus.com/bid/30358 - http://secur
3981 - http://marc.info/?l=full-disclosure&m=121684757516717&w=2 - http://www.securityfocus.com/bid/30358 - http://securityreason.com/securityalert/4066 - http://www.securitytracker.com/id?1020540
CVE ID: CVE-2008-3371 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6451 - http://www.vupen.com/english/advisories/2008/2211/references - https://www.exploit-db.com/exploits/9095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44018 - http://www.packetst
ps://www.exploit-db.com/exploits/9095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44018 - http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt - http://securityreason.com/securityalert/4067 - https://www.exploit-db.com/exploits/6148 - http://www.securityfocus.com/bid/30393 - http://www.scripts.oldguy.us/talkback/release-notes.html
CVE ID: CVE-2008-3372 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44027 - http://www.securityfocus.com/bid/30388 - http://www.vupen.com/english/advisories/2008/2217/references - https://www.exploit-db.com/exploits/6143 - http://securityreason.com/securityalert/4068
CVE ID: CVE-2008-3373 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44057 - http://www.vupen.com/english/advisories/2008/2225/references - http://www.securitytracker.com/id?1020570 - http://www.securityfocus.com/archive/1/494867/100/0/threaded - http://www.grisoft.com/ww.94
ritytracker.com/id?1020570 - http://www.securityfocus.com/archive/1/494867/100/0/threaded - http://www.grisoft.com/ww.94247 - http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt - http://secunia.com/advisories/31290 - http://www.securityfocus.com/bid/30417