Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://osvdb.org/45946 - http://security.gentoo.org/glsa/glsa-200708-17.xml - http://www.opera.com/docs/changelogs/solaris/922/ - http://www.opera.com/docs/changelogs/freebsd/922/
CVE ID: CVE-2007-4945 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:27.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via (1) a student's email address, (2) the year parameter to genbrws/Student/cal_month.php3, and other unspecified vectors related to the calendar. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36599 - http://www.sec
otes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36599 - http://www.securityfocus.com/bid/25662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36600 - http://www.securityfocus.com/bid/25663 - http://secunia.com/advisories/26768
CVE ID: CVE-2007-4946 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:28.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36625 - http://osvdb.org/43160 - http://secunia.com/advisories/26768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36622
CVE ID: CVE-2007-4947 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:28.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43152 - http://osvdb.org/43155 - http://osvdb.org/43150 - http://osvdb.org/43158 - http://osvdb.org/43157 - http://
.org/43152 - http://osvdb.org/43155 - http://osvdb.org/43150 - http://osvdb.org/43158 - http://osvdb.org/43157 - http://osvdb.org/43151 - http://osvdb.org/43154 - http://osvdb.org/43153 - http://osvdb.org/43156 - http://osvdb.org/43159 - http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/
CVE ID: CVE-2007-4948 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code via (1) a URL in the path_include parameter to includes/rss.class.php, (2) a URL in the path_template parameter to (a) templates/main.tpl.php or (b) templates/folder_messages_link_message_name.tpl.php, or (4) a URL in the path_templates parameter to templates/sidebar.tpl.php. NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the
php. NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess support. NOTE: the includes/core.lib.php vector is already covered by CVE-2006-5252. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43142 - http://arfis.wordpress.com/2007/09/14/rfi-03-webmedia-explorer/ - http://osvdb.org/43143 - http://osvdb.org/43140 - http://osvdb.org/43141
CVE ID: CVE-2007-4949 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:26.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) ekilat.com-int.tpl.php, (2) phpreactor.org-top.tpl.php, or (3) ekilat.com-top.tpl.php in examples/. NOTE: this issue has been disputed by CVE, since the vulnerability is present only when the product is incorrectly installed by placing examples/ under the web root Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.co
examples/ under the web root Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-03-phpreactor/ - http://osvdb.org/43139
CVE ID: CVE-2007-4950 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:26.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-03-phportal/ - http://www.securityfocus.com/bid/25717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42477
CVE ID: CVE-2007-4951 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42519 - http://arfis.wordpress.com/2007/09/14/rfi-03-yapig-yet-another-php-image-gallery/
CVE ID: CVE-2007-4952 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25692 - https://www.exploit-db.com/exploits/4418
CVE ID: CVE-2007-4953 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25688 - https://www.exploit-db.com/exploits/4417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36640
CVE ID: CVE-2007-4954 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:28.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36639 - http://secunia.com/advisories/26849 - http://www.securityfocus.com/bid/25691 - https://www.exploit-db.com/exploits/4416
CVE ID: CVE-2007-4955 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25680 - https://www.exploit-db.com/exploits/4415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36638 - http://secunia.com/advisories/26799
CVE ID: CVE-2007-4956 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36635 - https://www.exploit-db.com/exploits/4412 - http://koogar.alory
ps://exchange.xforce.ibmcloud.com/vulnerabilities/36635 - https://www.exploit-db.com/exploits/4412 - http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29 - https://www.exploit-db.com/exploits/4413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36634 - https://www.exploit-db.com/exploits/4414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36636 - http://www.securityfocus.com/bid/25679 - http://secunia.com/advisories/26850 - http://osvdb.org/37182 - http://osvdb.org/37180
CVE ID: CVE-2007-4957 State: PUBLISHED Published: 2007-09-18T20:00:00 Last Updated: 2024-08-07T15:17:27.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36641 - http://osvdb.org/38882 - http://osvdb.org/38881 - http://secunia.com/advisories/26851 - http://www.securityfocus.c
641 - http://osvdb.org/38882 - http://osvdb.org/38881 - http://secunia.com/advisories/26851 - http://www.securityfocus.com/bid/25681 - http://www.vupen.com/english/advisories/2007/3180 - https://www.exploit-db.com/exploits/4411
CVE ID: CVE-2007-4958 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2) i_frames/i_login.php, and (3) i_frames/i_top_tags.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3186 - http://secunia.com/advisories/26841 - http://www.securityfocus.c
: - http://www.vupen.com/english/advisories/2007/3186 - http://secunia.com/advisories/26841 - http://www.securityfocus.com/bid/25689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36644
CVE ID: CVE-2007-4959 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26833 - http://osvdb.org/37094 - http://www.securityfocus.com/bid/25684 - http://www.vupen.com/english/advisories/2007/3187 - https://exchange.xf
37094 - http://www.securityfocus.com/bid/25684 - http://www.vupen.com/english/advisories/2007/3187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36642
CVE ID: CVE-2007-4960 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' (double-quote space) sequence followed by the -autologin and -loginuri arguments, which cause the handler to post login credentials and software installation details to an arbitrary URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36651 - http:/
nalyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36651 - http://www.securityfocus.com/archive/1/479698/100/0/threaded - http://www.gnucitizen.org/blog/ie-pwns-secondlife - http://secunia.com/advisories/26845 - http://www.vupen.com/english/advisories/2007/3188
CVE ID: CVE-2007-4961 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnucitizen.org/blog/ie-pwns-secondlife - http://osvdb.org/45947
CVE ID: CVE-2007-4962 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479695/100/0/threaded - http://osvdb.org/40550 - http://securityreason.com/securityalert/3140 - https://exchange.xforce.ibmcloud.com/vulnera
d - http://osvdb.org/40550 - http://securityreason.com/securityalert/3140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36663 - http://www.securityfocus.com/bid/25687 - http://secunia.com/advisories/26832
CVE ID: CVE-2007-4963 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479695/100/0/threaded - http://osvdb.org/45948 - http://securityreason.com/securityal
://www.securityfocus.com/archive/1/479695/100/0/threaded - http://osvdb.org/45948 - http://securityreason.com/securityalert/3140 - http://www.securityfocus.com/archive/1/479872/100/100/threaded
CVE ID: CVE-2007-4964 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsPerSec field in the header of a .IMG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479695/100/0/threaded - http://osvdb.org/45950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36669 - http://securityreason.com/securityalert/3140 - http://www.securityfocus.com/bid/25687
CVE ID: CVE-2007-4965 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2008/00000
nal Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2008/000005.html - http://www.securityfocus.com/bid/25696 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254 - http://www.vupen.com/english/advisories/2007/4238 - http://secunia.com/advisories/38675 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/28136 - http://secunia.com/advisories/37471 - http://secunia.com/advisories/27460 - http://secunia.com/advisories/28480 - http://secunia.com/advisories/26837 - http://w
tp://secunia.com/advisories/27460 - http://secunia.com/advisories/28480 - http://secunia.com/advisories/26837 - http://www.vupen.com/english/advisories/2007/3201 - http://www.debian.org/security/2008/dsa-1551 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/29303 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/27872 - http://secunia.com/advisories/29032 - http://secunia.com/advisories/31492 - https://www.redhat.com/archives/fedora-package-announce/2007-Octobe
sories/29032 - http://secunia.com/advisories/31492 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html - http://www.securityfocus.com/archive/1/488457/100/0/threaded - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.redhat.com/support/errata/RHSA-2007-1076.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.vupen.com/english/advisories/2008/0637 - https://exchange
securityfocus.com/archive/1/507985/100/0/threaded - http://www.vupen.com/english/advisories/2008/0637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36653 - http://bugs.gentoo.org/show_bug.cgi?id=192876 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/27562 - http://www.ubuntu.com/usn/usn-585-1 - http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:012 - http://support.avaya.com/css/P8/documents/100074697 - http://secunia.com/advisories/31255 - http://www.securityfocus.com/archive/1/487990/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2008:013 - http://w
tyfocus.com/archive/1/487990/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2008:013 - http://www.debian.org/security/2008/dsa-1620 - http://secunia.com/advisories/28838 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - https://issues.rpath.com/browse/RPL-1885 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/29889
CVE ID: CVE-2007-4966 State: PUBLISHED Published: 2007-09-18T22:00:00 Last Updated: 2024-08-07T15:17:27.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26803 - http://www.portcullis.co.uk/179.php - http://www.securityfocus.com/bid/25665 - https://www.exploit-db.com/exploits/4404 - http://www.vupen.com/english/advisories/2007/3174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48844
CVE ID: CVE-2007-4967 State: PUBLISHED Published: 2007-09-19T01:00:00 Last Updated: 2024-08-07T15:17:27.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12)
ort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread, and (17) NtTerminateThread. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25711 - http://osvdb.org/45951 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-4968 State: PUBLISHED Published: 2007-09-19T01:00:00 Last Updated: 2024-08-07T15:17:27.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2) NtOpenThread. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25712 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firew
ec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://osvdb.org/45952 - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-4969 State: PUBLISHED Published: 2007-09-19T01:00:00 Last Updated: 2024-08-07T15:17:27.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25719 -