Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6601 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454505/100/0/threaded - http://www.vupen.com/english/advisories/2006/5039 - http://www.attrition.org/pipermail/vim/2006-December/001
/threaded - http://www.vupen.com/english/advisories/2006/5039 - http://www.attrition.org/pipermail/vim/2006-December/001182.html - http://www.securityfocus.com/bid/21612
CVE ID: CVE-2006-6602 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454584/100/0/threaded - http://www.securityfocus.com/archive/1/454502/100/0/threaded - http://www.vupen.com/english/advisories/2006/5039 - http://www.securityfocus.com/bid/21612
CVE ID: CVE-2006-6603 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017387 - http://www.securityfocus.com/bid/21607 - http://www.kb.cert.org/vuls/id/901852 - http://www.vupen.com/english/advisories/2006/5016 - http://messenger.yahoo.com/security_update.
ert.org/vuls/id/901852 - http://www.vupen.com/english/advisories/2006/5016 - http://messenger.yahoo.com/security_update.php?id=120806 - http://secunia.com/advisories/23401
CVE ID: CVE-2006-6604 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30831 - http://secunia.com/advisories/23270 - http://www.securityfocus.com/bid/21525 - https://www.exploit-db.com/exploits/2902
CVE ID: CVE-2006-6605 State: PUBLISHED Published: 2006-12-19T19:00:00 Last Updated: 2024-08-07T20:33:59.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017395 - http://secunia.com/advisories/23127 - http://securityreason.com/securityalert/2053 - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com
/23127 - http://securityreason.com/securityalert/2053 - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com/bid/21645 - http://www.securityfocus.com/archive/1/454713/100/0/threaded - http://secunia.com/secunia_research/2006-75/advisory/ - http://www.vupen.com/english/advisories/2006/5052
CVE ID: CVE-2006-6606 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Clarens jclarens before 0.6.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21588 - http://sourceforge.net/project/shownotes.php?release_id=470844 - http://secunia.com/advisories/23350 - http://www.vupen.com/english/advisories/2006/5001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30881
CVE ID: CVE-2006-6607 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21570 - http://secunia.com/advisories/23359 - http://securitytracker.com/id?1017380 - http://www.vupen.com/english/advisories/2006/4989 - https:/
m/advisories/23359 - http://securitytracker.com/id?1017380 - http://www.vupen.com/english/advisories/2006/4989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30865 - http://www-1.ibm.com/support/docview.wss?uid=swg21251069
CVE ID: CVE-2006-6608 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SSH key based authentication in HP Integrated Lights Out (iLO) 1.70 through 1.87, and iLO 2 1.00 through 1.11, on Proliant servers, allows remote attackers to "gain unauthorized access." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4996 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00800677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30908 - http://www.securityfocus.com/bid/21575 - http://www2.itrc.hp.com/servi
hange.xforce.ibmcloud.com/vulnerabilities/30908 - http://www.securityfocus.com/bid/21575 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00800677 - http://securitytracker.com/id?1017378 - http://secunia.com/advisories/23336
CVE ID: CVE-2006-6609 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or crash) via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200702-09.xml - http://secunia.com/advisories/24298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30876 - http://sourceforge.net/project/shownotes.php?release_id=470675&group_id=81584 - http://ww
ud.com/vulnerabilities/30876 - http://sourceforge.net/project/shownotes.php?release_id=470675&group_id=81584 - http://www.vupen.com/english/advisories/2006/4992 - http://secunia.com/advisories/24313 - http://www.securityfocus.com/bid/21574
CVE ID: CVE-2006-6610 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command injection." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30875 - http://security.gentoo.org/glsa/glsa-200702-09.xml - http://secunia.com/advisories/24298 - http://sourceforge.net/project/shownotes.php?release_id=470675&group_id=81584 - http://www.vupen.com/english/advisories/2006/4992 - http://secunia.com/advisories/24313 - http://www.secu
oup_id=81584 - http://www.vupen.com/english/advisories/2006/4992 - http://secunia.com/advisories/24313 - http://www.securityfocus.com/bid/21574
CVE ID: CVE-2006-6611 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2920 - http://www.attrition.org/pipermail/vim/2006-December/001184.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30823 - http://www.vupen.com/english/advisories/2006/4944 - http://www.securityfocus.com/bid/21544
CVE ID: CVE-2006-6612 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21583 - http://www.attrition.org/pipermail/vim/2006-December/001185.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30893 - http://www.vupen.com/english/advisories/2006/5031 - https://www.exploit-db.com/exploits/2927
CVE ID: CVE-2006-6613 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. (dot dot) in the pa_lang[include_file] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud
luded by language.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30817 - https://www.exploit-db.com/exploits/2913 - http://www.vupen.com/english/advisories/2006/4927 - http://www.securityfocus.com/bid/21519
CVE ID: CVE-2006-6614 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30892 - http://www.vupen.com/english/advisories/2006/4995 - h
330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30892 - http://www.vupen.com/english/advisories/2006/4995 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=402644 - http://www.securityfocus.com/bid/21579
CVE ID: CVE-2006-6615 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:34:00.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30822 - https://www.exploit-db.com/exploits/2919 - http://www.vupen.com/english/advisories/2006/4945 - http://www.securityfocus.com/bid/21547
CVE ID: CVE-2006-6616 State: PUBLISHED Published: 2006-12-18T02:00:00 Last Updated: 2024-08-07T20:33:59.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=471109 - http://www.securityfocus.com/bid/21590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30886 - http://secunia.com/a
tp://www.securityfocus.com/bid/21590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30886 - http://secunia.com/advisories/23383
CVE ID: CVE-2006-6617 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:34:00.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2047 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051316.html - http://securitytracker.com/id?1017388 - http://secunia.com/advis
k/pipermail/full-disclosure/2006-December/051316.html - http://securitytracker.com/id?1017388 - http://secunia.com/advisories/23391 - http://www.securityfocus.com/archive/1/454497/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30905 - http://www.vupen.com/english/advisories/2006/5038 - http://www.securityfocus.com/bid/21611
CVE ID: CVE-2006-6618 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/
al-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/21615 - http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip
CVE ID: CVE-2006-6619 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus
al-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/21615 - http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip
CVE ID: CVE-2006-6620 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.co
personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/21615 - http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip
CVE ID: CVE-2006-6621 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfoc
eral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/21615 - http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip
CVE ID: CVE-2006-6622 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:34:00.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://w
ification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.com/bid/21615 - http://www.wilderssecurity.com/showthread.php?t=158155 - http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip
CVE ID: CVE-2006-6623 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php - http://www.securityfocus.com/archive/1/454522/100/0/threaded - http://www.securityfocus.co
CVE ID: CVE-2006-6624 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) via a long series of "./" sequences in the SIZE command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30920 - http://www.securityfocus.com/data/vulnerabilities/exploits/21617.php - http://www.vupen.com/english/advisories/2006/5041 - http://securitytracker.com/id?1017393 - https://www.exploit-db.com/ex
ttp://www.vupen.com/english/advisories/2006/5041 - http://securitytracker.com/id?1017393 - https://www.exploit-db.com/exploits/2934 - http://www.securityfocus.com/bid/21617
CVE ID: CVE-2006-6625 State: PUBLISHED Published: 2006-12-18T11:00:00Z Last Updated: 2024-09-17T00:21:26.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21596 - http://www.securityfocus.com/data/vulnerabilities/exploits/21596.html
CVE ID: CVE-2006-6626 State: PUBLISHED Published: 2006-12-18T11:00:00Z Last Updated: 2024-09-16T19:25:12.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21596 - http://www.security
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21596 - http://www.securityfocus.com/data/vulnerabilities/exploits/21596.html
CVE ID: CVE-2006-6627 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
the "cevakrnl.xmd vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21610 - http://securitytracker.com/id?1017389 - http://securityreason.com/securityalert/2044 - http://www.bitdefender.com/KB323-en--cevakrnl.xmd-vulnerability.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051319.html - http://secunia.com/advisories/23415 - http://www.securityfocus.com/archive/1/454501/100/0/threaded - http://www.vupen.com/english/advisories/2006/5040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30904
CVE ID: CVE-2006-6628 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454722/100/0/threaded - http://www.vupen.com/english/advisories/2006/5051 - http://www.milw0rm.com/sploits/12122006-djtest.doc - http://www.securityfocus.com/archive/1/4545
/advisories/2006/5051 - http://www.milw0rm.com/sploits/12122006-djtest.doc - http://www.securityfocus.com/archive/1/454514/100/0/threaded - http://www.securityfocus.com/archive/1/454545/100/0/threaded - http://securityreason.com/securityalert/2043 - http://www.securityfocus.com/bid/21618 - http://www.securityfocus.com/archive/1/454737/100/0/threaded