Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2271 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the dnld parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33893 - http://secunia.com/advisories/24957 - http://osvdb.org/35324 - https://www.exploit-db.com/exploits/3794 - http://www.securityfocus.com/bid/23632 - http://www.vupen.com/english/advisories/2007/1527
CVE ID: CVE-2007-2272 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33860 - http://www.securityfocus.com/bid/23633 - https://www.exploit-db.com/exploits/3795 - http://secunia.com/advisories/25046
CVE ID: CVE-2007-2273 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1528 - https://www.exploit-db.com/exploits/3796 - http://www.securityfocus.com/bid/23636 - http://osvdb.org/35319 - http://secunia.com/advisories/25015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33865
CVE ID: CVE-2007-2274 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34079
CVE ID: CVE-2007-2275 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Command View Advanced Edition for XP before 5.6.0-01, XP Replication Monitor before 5.6.0-01, and XP Tiered Storage Manager before 5.5.0-02 allows local users to access other accounts via unspecified vectors during registration or addition of new users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017959 - http://www.securityfocus.com/bid/23630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33857 - http://h20000.www2.hp.
://www.securityfocus.com/bid/23630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33857 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00911797 - http://www.vupen.com/english/advisories/2007/1533 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00911797 - http://secunia.com/advisories/25029
CVE ID: CVE-2007-2276 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with no DoS emerging. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23644 - http://www.securityfocus.com/archive/1/466891/100/0/threaded - http://www.securityfocus.com/archive/1/466795/
id/23644 - http://www.securityfocus.com/archive/1/466891/100/0/threaded - http://www.securityfocus.com/archive/1/466795/100/0/threaded - http://www.securityfocus.com/archive/1/466784/100/0/threaded - http://osvdb.org/35724
CVE ID: CVE-2007-2277 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33863 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls46 - http://www.securityfocus.com/archive/1/466772/100/0/threaded - http://securityreason.com/securityalert/2614
CVE ID: CVE-2007-2278 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to library/editor/editor.php, or (3) the cfgfile_to_load parameter to admin/phpMyAdmin/libraries/common.lib.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35755 - http://securityreason.com/securityalert/2615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/338
svdb.org/35755 - http://securityreason.com/securityalert/2615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33876 - http://www.securityfocus.com/archive/1/466783/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33878
CVE ID: CVE-2007-2279 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:33:28.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2007.06.01.html - http://secunia.com/advisories/25537 - http://www
: - http://www.symantec.com/avcenter/security/Content/2007.06.01.html - http://secunia.com/advisories/25537 - http://www.securityfocus.com/archive/1/470562/100/0/threaded - http://www.securitytracker.com/id?1018188 - http://seer.entsupport.symantec.com/docs/288627.htm - http://osvdb.org/36104 - http://www.securityfocus.com/bid/24194 - http://www.vupen.com/english/advisories/2007/2035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34680
CVE ID: CVE-2007-2280 State: PUBLISHED Published: 2009-12-18T19:00:00Z Last Updated: 2024-09-16T21:56:35.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-099/ - http://www.securityfocus.com/bid/37396 - http://marc.info/?l=bugtraq&m=126106261622
tiative.com/advisories/ZDI-09-099/ - http://www.securityfocus.com/bid/37396 - http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://securitytracker.com/id?1023361 - http://www.vupen.com/english/advisories/2009/3594 - http://marc.info/?l=bugtraq&m=126106261622540&w=2
CVE ID: CVE-2007-2281 State: PUBLISHED Published: 2009-12-18T19:00:00Z Last Updated: 2024-09-17T03:53:05.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-09-15 - http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://securit
- http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://marc.info/?l=bugtraq&m=126106261622540&w=2 - http://securitytracker.com/id?1023361 - http://www.vupen.com/english/advisories/2009/3594 - http://www.securityfocus.com/bid/37386 - http://marc.info/?l=bugtraq&m=126106261622540&w=2
CVE ID: CVE-2007-2282 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1545 - http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml - http://www.osvdb.org/35524 - http://www.securityfocu
m/en/US/products/products_security_advisory09186a008082c520.shtml - http://www.osvdb.org/35524 - http://www.securityfocus.com/bid/23647 - http://securitytracker.com/id?1017960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33861 - http://www.kb.cert.org/vuls/id/127545
CVE ID: CVE-2007-2283 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33866 - http://www.securityfocus.com/bid/23660 - http://osvdb.org/35385 - http://secunia.com/advisories/25054 - https://www.exploit-db.com/exploits/3798 - http://www.vupen.com/english/advisories/2007/1543
CVE ID: CVE-2007-2284 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1542 - https://www.exploit-db.com/exploits/3797 - http://secunia.com/advisories/25055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33862 - http://www.securityfocus.com/bid/23653 - http://osvdb.org/35384
CVE ID: CVE-2007-2285 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33864 - http://osvdb.org/35561 - http://attrition.org/pipermail/vim/2007-April/001546.html - http://www.securityfocus.co
33864 - http://osvdb.org/35561 - http://attrition.org/pipermail/vim/2007-April/001546.html - http://www.securityfocus.com/bid/23643 - https://www.exploit-db.com/exploits/3800 - http://attrition.org/pipermail/vim/2007-April/001549.html - http://attrition.org/pipermail/vim/2007-April/001545.html
CVE ID: CVE-2007-2286 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_db parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23651 - http://www.securityfocus.com/archive/1/466865/100/0/thread - http://osvdb.org/34166
CVE ID: CVE-2007-2287 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23661 - http://www.osvdb.org/34168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33870 - http://www.securityfocus.com/archive/1/466870/100/0/threaded
CVE ID: CVE-2007-2288 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34171 - http://www.securityfocus.com/archive/1/466842/100/0/threaded - http://www.securityfocus.com/bid/23675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33923
CVE ID: CVE-2007-2289 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in SPAW. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466890/100/0/threaded - http://osvdb.org/35401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33918
CVE ID: CVE-2007-2290 State: PUBLISHED Published: 2007-04-26T19:00:00 Last Updated: 2024-08-07T13:33:28.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php. NOTE: this may overlap CVE-2002-1466. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35550 - http://www.securityfocus.com/archive/1/466860/100/0/threaded - http://www.securityfocus.com/bid/23659 - http://securityreason.com/securityalert/2632 - http://o
466860/100/0/threaded - http://www.securityfocus.com/bid/23659 - http://securityreason.com/securityalert/2632 - http://osvdb.org/35551 - http://osvdb.org/35552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33884
CVE ID: CVE-2007-2291 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.wisec.it/vulns.php?id=11 - http://www.securitytracker.com/id?1017969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33978 - http://www.securityfocus.com/bid/23668 - http://www.securityfocus.com/archive/1/466906/100/0/threaded - h
lities/33978 - http://www.securityfocus.com/bid/23668 - http://www.securityfocus.com/archive/1/466906/100/0/threaded - http://securityreason.com/securityalert/2654
CVE ID: CVE-2007-2292 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.wisec.it/vulns.php?id=11 - http://www.securitytracker.com/id?10179
us.com/archive/1/482876/100/200/threaded - http://www.wisec.it/vulns.php?id=11 - http://www.securitytracker.com/id?1017968 - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - http://secunia.com/advisories/27360 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://secunia.com/advisories/27315 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27
tp://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://www.debian.org/security/2007/dsa-1392 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - http://www.securityfocus.com/bid/23668 - https://www.redhat.com/archives/fedora-package-annou
nia.com/advisories/27387 - http://www.securityfocus.com/bid/23668 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://secunia.com/advisories/27403 - http://secunia.com/advisories/27336 - http://www.debian.org/security/2007/dsa-1396 - http://www.mozilla.org/security/announce/2007/mfsa2007-31.html - http://secunia.com/advisories/27425 - http://secunia.com/advisories/28398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33981 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10195 - http://secunia.com/advisories/27311 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http:
/secunia.com/advisories/27311 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - http://secunia.com/advisories/27665 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://www.securityfocus.com/archive/1/466906/100/0/threaded - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://secunia.com/advisories/27480 - https://bugzilla.mozilla.org/show_bug.cgi?id=378787 - http://secunia.com/advisories/27680 - http://securityreason.com/securityalert/2654 - http://support.nov
.cgi?id=378787 - http://secunia.com/advisories/27680 - http://securityreason.com/securityalert/2654 - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - http://www.ubuntu.com/usn/usn-536-1
CVE ID: CVE-2007-2293 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP INVITE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23648 - http://www.osvdb.org/35368 - http://www.vupen.com/english/advisories/2007/1534 - http://www.securityfocus.com/archi
48 - http://www.osvdb.org/35368 - http://www.vupen.com/english/advisories/2007/1534 - http://www.securityfocus.com/archive/1/466883/100/0/threaded - http://www.securityfocus.com/archive/1/472804/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33895 - http://secunia.com/advisories/24977 - http://www.securitytracker.com/id?1018337 - http://www.securitytracker.com/id?1017951 - http://securityreason.com/securityalert/2645 - http://www.asterisk.org/files/ASA-2007-010.pdf
CVE ID: CVE-2007-2294 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1534 - http://www.securitytracker.com/id?1017955 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://www.osvdb.org
itytracker.com/id?1017955 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://www.osvdb.org/35369 - http://securityreason.com/securityalert/2646 - http://secunia.com/advisories/25582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33886 - http://secunia.com/advisories/24977 - http://www.securityfocus.com/bid/23649 - http://www.debian.org/security/2007/dsa-1358 - http://www.securityfocus.com/archive/1/466911/100/0/threaded - http://www.asterisk.org/files/ASA-2007-012.pdf
CVE ID: CVE-2007-2295 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a crafted H.264 MOV file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://security-protocols.com/sp-x45-advisory.php - http://www.securitytracker.com/id?1018373 - http://www.osvdb.org/35577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34070 - http://www.us-cert.gov/cas/techalerts/TA07-193
.org/35577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34070 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securitytracker.com/id?1017965 - http://www.securityfocus.com/bid/23650 - http://docs.info.apple.com/article.html?artnum=305947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35356 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html