Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6500 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://osvdb.org/44185 - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.explo
lish/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2007-6501 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4
x-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2007-6502 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and (2) certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or MSXML2.XMLHTTP objects, which trigger a response with the setup directory pathname in the HTML source; and (3) might allow remote attackers to obtain sensitive information via a request for /admin/forum/, which reveals the path in an error m
w remote attackers to obtain sensitive information via a request for /admin/forum/, which reveals the path in an error message when a forum is not found. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39039 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39043
CVE ID: CVE-2007-6503 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/importhostingplans.asp; or (2) change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the (a) save, (b) 30, and (c) d_30 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english
m/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2007-6504 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/268
Hotfix-3_3-sec-Patch-ReleaseNotes.html - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39048
CVE ID: CVE-2007-6505 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:11:06.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39185 - http://osvdb.org/44332 - https://oval.ci
ey=1-66-201310-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39185 - http://osvdb.org/44332 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5282 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103172-1
CVE ID: CVE-2007-6506 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:11:06.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019133 - http://blogs.zdnet.com/security/?p=768 - http://www.securityfocus.com/archive/1/485451/100/0/thread
ker.com/id?1019133 - http://blogs.zdnet.com/security/?p=768 - http://www.securityfocus.com/archive/1/485451/100/0/threaded - http://secunia.com/advisories/28177 - http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818 - https://www.exploit-db.com/exploits/4757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39153 - http://www.vupen.com/english/advisories/2007/4271 - http://www.securityfocus.com/bid/26950 - http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt - http://www.securityfocus.com/archive/1/485451/100/0/threaded - http://www.securityfocus.com/archive/1/485734/100/0/threaded - http://it.slashdot.org/it/07/12/20/2327242.shtml
CVE ID: CVE-2007-6507 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:11:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44318 - http://www.securityfocus.com/bid/26912 - http://www.zerodayinitiative.com/advisories/ZDI-07-077.html - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en
ww.zerodayinitiative.com/advisories/ZDI-07-077.html - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt - http://www.securityfocus.com/archive/1/485250/100/0/threaded - http://securityreason.com/securityalert/3475 - http://secunia.com/advisories/26523
CVE ID: CVE-2007-6508 State: PUBLISHED Published: 2007-12-21T19:00:00 Last Updated: 2024-08-07T16:11:05.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44555 - http://securityreason.com/securityalert/3477 - http://www.securityfocus.com/archive/1/485335/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39151 - https://www.exploit-db.com/exploits/4758 - http://www.securityfocus.com/bid/26952
CVE ID: CVE-2007-6509 State: PUBLISHED Published: 2007-12-21T19:00:00 Last Updated: 2024-08-07T16:11:06.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26913 - http://marc.info/?l=full-disclosure&m=119794961212714&w=2 - http://secunia.com/advisories/28121 - http://www.osvdb.org/39500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39145
CVE ID: CVE-2007-6510 State: PUBLISHED Published: 2007-12-21T19:00:00 Last Updated: 2024-08-07T16:11:05.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the (1) AMOS-MusicBank, (2) FuzzacPacker, and (3) QuadraComposer rippers; and (4) have an unknown impact via a crafted file to the SkytPacker ripper. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/prowizbof.zip - http://aluigi.altervista.org/adv/prowizbof-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39152 - http://www.s
/aluigi.altervista.org/adv/prowizbof-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39152 - http://www.securityfocus.com/bid/26953 - http://secunia.com/advisories/28173
CVE ID: CVE-2007-6511 State: PUBLISHED Published: 2007-12-21T19:00:00 Last Updated: 2024-08-07T16:11:05.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4210 - http://www.securitytracker.com/id?1019094 - http://mrhinkydink.blogspot.com/2007/12/websense-policy-filtering-bypass.html - http://secunia.com/advisories/28026 - http://lists.grok.org.uk/piper
com/2007/12/websense-policy-filtering-bypass.html - http://secunia.com/advisories/28026 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059092.html - http://www.websense.com/SupportPortal/SupportKbs/976.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/39023 - http://www.securityfocus.com/archive/1/485033/100/0/threaded - http://www.securityfocus.com/archive/1/485032/100/0/threaded
CVE ID: CVE-2007-6512 State: PUBLISHED Published: 2007-12-21T22:00:00 Last Updated: 2024-08-07T16:11:05.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3478 - http://www.securityfocus.com/archive/1/485178/100/0/threaded - http://www.securityfocus.com/archive/1/485098/100/0/threaded - http://www.securityfocus.com/archive/1/485266/100/0/threaded - http://osvdb.org/40
com/archive/1/485098/100/0/threaded - http://www.securityfocus.com/archive/1/485266/100/0/threaded - http://osvdb.org/40232
CVE ID: CVE-2007-6513 State: PUBLISHED Published: 2007-12-21T22:00:00 Last Updated: 2024-08-07T16:11:06.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html - http://www.securityfocus.com/bid/26967 - http://www.heise-security.co.uk/news/100934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39156
CVE ID: CVE-2007-6514 State: PUBLISHED Published: 2007-12-21T22:00:00 Last Updated: 2024-08-07T16:11:05.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485316/100/0/threaded - http://securityreason.com/securityalert/3479 - http://www.securityfocus.com/bid/26939 - https://exchange.xforce.ibmcloud
http://securityreason.com/securityalert/3479 - http://www.securityfocus.com/bid/26939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39158
CVE ID: CVE-2007-6515 State: PUBLISHED Published: 2007-12-21T22:00:00 Last Updated: 2024-08-07T16:11:06.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39182 - http://secunia.com/advisories/28182 - http://www.securityfocus.com/archive/1/485398/100/0/threaded - http://osvdb.org/39875 - http://www.exploit-db.com/exploits/15987 - http://securityreason.com/securityalert/3480 - http://www.securityfocus.com/bid/26963
CVE ID: CVE-2007-6516 State: PUBLISHED Published: 2007-12-21T22:00:00 Last Updated: 2024-08-07T16:11:05.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property. Additional Analyst Notes: - CVE Program Container: References: - http://shinnai.altervista.org/exploits/txt/TXT_MiyDKP9PDPCRBoRpWq3N.html - http://www.securityfocus.com/bid/26934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39140
CVE ID: CVE-2007-6517 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:05.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485393/100/0/threaded - http://www.vupen.com/english/advisories/2007/4302 - http://secunia.com/advisories/28193 - http://aria-security.n
eaded - http://www.vupen.com/english/advisories/2007/4302 - http://secunia.com/advisories/28193 - http://aria-security.net/forum/showthread.php?p=1174 - http://www.osvdb.org/39383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39176 - http://www.securityfocus.com/bid/26962
CVE ID: CVE-2007-6518 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:05.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39174 - http://www.securityfocus.com/archive/1/485408/100/0/threaded - http://www.vupen.com/english/advisories/2007/4300 - http://secunia.com/advisories/28188 - http://www.securityfocus.com/bi
ttp://www.vupen.com/english/advisories/2007/4300 - http://secunia.com/advisories/28188 - http://www.securityfocus.com/bid/26973 - http://www.osvdb.org/39497
CVE ID: CVE-2007-6519 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:06.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4293 - http://www.securitytracker.com/id?1019135 - http://secunia.com/advisories/28192 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01310389 - http://www.securityfocus.com/bid/26964 - https://excha
2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01310389 - http://www.securityfocus.com/bid/26964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39172 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01310389
CVE ID: CVE-2007-6520 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:06.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/925/ - http://bugs.gentoo.org/show_bug.cgi?id=202770 - http://www.opera.com/docs/changelogs/linux/925/ - http://www.securitytracker.com/id?1019131 - http://secunia.com/advisories/28314 - http://www.securityfocus.com/bid/26937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39147 - http://l
s/28314 - http://www.securityfocus.com/bid/26937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39147 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - http://security.gentoo.org/glsa/glsa-200712-22.xml - http://www.vupen.com/english/advisories/2007/4261 - http://secunia.com/advisories/28169 - http://secunia.com/advisories/28290
CVE ID: CVE-2007-6521 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:05.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/925/ - http://bugs.gentoo.org/show_bug.cgi?id=202770 - http://www.opera.com/docs/changelogs/linux/925/ - http://www.securitytracker.com/id?1019131 - http://secunia.com/advisories/28314 - http://www.securityfocus.com/bid/26937 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg000
ies/28314 - http://www.securityfocus.com/bid/26937 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - http://security.gentoo.org/glsa/glsa-200712-22.xml - http://www.vupen.com/english/advisories/2007/4261 - http://secunia.com/advisories/28169 - http://secunia.com/advisories/28290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39161
CVE ID: CVE-2007-6522 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:05.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/925/ - http://bugs.gentoo.org/show_bug.cgi?id=202770 - http://www.opera.com/docs/changelogs/linux/925/ - http://www.securitytracker.com/id?1019131 - http://secunia.com/advisories/28314 - http://www.securityfocus.com/bid/26937 - https
ww.securitytracker.com/id?1019131 - http://secunia.com/advisories/28314 - http://www.securityfocus.com/bid/26937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39147 - http://www.opera.com/support/search/view/875/ - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - http://security.gentoo.org/glsa/glsa-200712-22.xml - http://www.vupen.com/english/advisories/2007/4261 - http://secunia.com/advisories/28169 - http://secunia.com/advisories/28290
CVE ID: CVE-2007-6523 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:06.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28314 - http://securityreason.com/securityalert/3482 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - http://www.vupen.com/english/advisories/2007/4261 - http://www.securi
opensuse-security-announce/2008-01/msg00001.html - http://www.vupen.com/english/advisories/2007/4261 - http://www.securityfocus.com/archive/1/484605/100/200/threaded - http://www.securityfocus.com/bid/26721
CVE ID: CVE-2007-6524 State: PUBLISHED Published: 2007-12-24T20:00:00 Last Updated: 2024-08-07T16:11:06.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/925/ - http://bugs.gentoo.org/show_bug.cgi?id=202770 - http://securitytracker.com/id?1019435 - http://www.opera.com/docs/changelogs/linux/925/ - htt
g/show_bug.cgi?id=202770 - http://securitytracker.com/id?1019435 - http://www.opera.com/docs/changelogs/linux/925/ - http://www.securityfocus.com/archive/1/488264/100/0/threaded - http://www.opera.com/support/search/view/876/ - http://www.securitytracker.com/id?1019131 - http://secunia.com/advisories/28314 - http://www.securityfocus.com/bid/26937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39163 - http://osvdb.org/42691 - https://bugzilla.mozilla.org/show_bug.cgi?id=408076 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - http://security.gentoo.org/glsa/glsa-200712-22.xml - http://www.vupen.com/english/advisories/2007/4261 - http://secunia.com/advisori
ity.gentoo.org/glsa/glsa-200712-22.xml - http://www.vupen.com/english/advisories/2007/4261 - http://secunia.com/advisories/28169 - http://secunia.com/advisories/28290