Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cunia.com/advisories/28749 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://securityreason.com/securityalert/3526 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/486167/100/0/threaded - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://securityreason.com/achievement_securityalert/49 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html - http://www.securityfocus.com/bid/27234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39615 - http://secunia.com/advisories/28526 - http://www.redhat.com/support/errata/RHSA-2008-0006.html - http://www.vupen.com/english/advisories/2008/0924/references -
tp://www.redhat.com/support/errata/RHSA-2008-0006.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.redhat.com/support/errata/RHSA-2008-0007.html - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10812 - http://www.securitytracker.com/id?1019185 - http://www.redhat.com/support/errata/RHSA-2008-0008.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html - http://www.redhat.com/support/errata/RHSA-2008-0009.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 - http://secunia.com/advisories/29420 - http://lists.apple.com
/www.mandriva.com/security/advisories?name=MDVSA-2008:014 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.securityfocus.com/archive/1/505990/100/0/threaded - http://secunia.com/advisories/28467 - http://secunia.com/advisories/29348 - http://www.redhat.com/support/errata/RHSA-2008-0004.html - http://lists.vmware.com/pipermail/security-announce/2009/000062.html - http://secunia.com/advisories/28607 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html - http://www.mandriva.com/secu
sories/28607 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:015 - http://docs.info.apple.com/article.html?artnum=307562 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://secunia.com/advisories/28471 - http://www.ubuntu.com/usn/usn-575-1 - http://secunia.com/advisories/29640 - http://secunia.com/advisories/28977 - http://www.vupen.com/english/advisories/2008/1875/references - http://secunia.com/advisories/30732 - http://secunia.com/advisories/35650 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e0
/security/advisories?name=MDVSA-2008:016 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread
r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.htt
che.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb68
c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https:/
.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2008-0006 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T07:32:23.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28542 - http://secunia.com/advisories/29139 - http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm - http://www.security
http://secunia.com/advisories/29139 - http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm - http://www.securityfocus.com/bid/27336 - http://www.vupen.com/english/advisories/2008/0184 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1 - http://secunia.com/advisories/29622 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=428044 - http://secunia.com/advi
e-security-announce/2008-04/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=428044 - http://secunia.com/advisories/28500 - http://secunia.com/advisories/28532 - http://secunia.com/advisories/29707 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:024 - http://secunia.com/advisories/28843 - http://secunia.com/advisories/28540 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://www.securityfocus.com/archive/1/487335/100/0/threaded - http://secunia.com/advisories/28544 - http://www.vupen.com/english/advisories/2008/0703 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 - https://oval.cisecurity.org/repository/search
8/0703 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10021 - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/28718 - http://www.redhat.com/support/errata/RHSA-2008-0029.html - http://www.openbsd.org/errata41.html#012_xorg - http://secunia.com/advisories/28941 - http://secunia.com/advisories/28592 - http://www.redhat.com/support/errata/RHSA-2008-0064.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39767 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://secunia.com/advisories/28621 - http:
/h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://secunia.com/advisories/28621 - http://secunia.com/advisories/29420 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0030.html - http://secunia.com/advisories/28273 - http://www.kb.cert.org/vuls/id/203220 - http://secunia.com/advisories/28550 - http://www.vupen.com/english/advisories/2008/0497/references - http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm - http://
pen.com/english/advisories/2008/0497/references - http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html - http://bugs.gentoo.org/show_bug.cgi?id=204362 - http://secunia.com/advisories/28885 - https://usn.ubuntu.com/571-1/ - http://security.gentoo.org/glsa/glsa-200804-05.xml - http://secunia.com/advisories/28535 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00771.html - http://www.vupen.com/english/advisories/2008/3000 - http://docs.info.apple.com/article.html?artnum=307562 - http://lists.freedesktop.org/archives/xorg/2008-January/031918.html - http://www14.software.ibm.com/webapp/set2/subscriptio
p://lists.freedesktop.org/archives/xorg/2008-January/031918.html - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities - http://www.securityfocus.com/bid/27352 - http://secunia.com/advisories/32545 - http://securitytracker.com/id?1019232 - https://issues.rpath.com/browse/RPL-2010 - http://www.openbsd.org/errata42.html#006_xorg - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html - http://secunia.com/advisories/28571 - http://secunia.com/advisories/28536 - http://jvn.jp/en/jp/JVN88935101/index.html - http://security.gentoo.org/
s/28571 - http://secunia.com/advisories/28536 - http://jvn.jp/en/jp/JVN88935101/index.html - http://security.gentoo.org/glsa/glsa-200801-09.xml - http://www.vupen.com/english/advisories/2008/0179 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-201230-1
CVE ID: CVE-2008-0007 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:32:23.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019357 - http://www.securityfocus.com/archive/1/487808/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17 - http://www.securityfocus.c
nce/2008-03/msg00007.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17 - http://www.securityfocus.com/bid/27686 - http://secunia.com/advisories/28806 - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://www.ubuntu.com/usn/usn-618-1 - http://secunia.com/advisories/28826 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://www.debian.org/security/2008/dsa-1565 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.debian.org/security/2008/dsa-1504 - http://secunia.com/advisories/30116 - http://wiki.rpath.com/wiki/Advisori
http://www.debian.org/security/2008/dsa-1504 - http://secunia.com/advisories/30116 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048 - http://www.redhat.com/support/errata/RHSA-2008-0233.html - http://lkml.org/lkml/2008/2/6/457 - http://secunia.com/advisories/30110 - http://www.vupen.com/english/advisories/2008/2222/references - http://secunia.com/advisories/33280 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:072 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 - http://www.vupen.com/english/advisories/2008/0445/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg0
ww.vupen.com/english/advisories/2008/0445/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0211.html - http://www.securityfocus.com/bid/27705 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://secunia.com/advisories/30769 - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://secunia.com/advisories/30018 - http://secunia.com/advisories/31246 - http://secunia.com/advisories/29570 - http://secunia.com/advisories/30112
CVE ID: CVE-2008-0008 State: PUBLISHED Published: 2008-01-28T23:00:00 Last Updated: 2024-08-07T07:32:23.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:027 - http://www.securityfocus.com/bid/27449 - http://secunia.com/advisories/28
.com/security/advisories?name=MDVSA-2008:027 - http://www.securityfocus.com/bid/27449 - http://secunia.com/advisories/28623 - https://tango.0pointer.de/pipermail/pulseaudio-discuss/2008-January/001228.html - http://pulseaudio.org/changeset/2100 - http://www.vupen.com/english/advisories/2008/0283 - http://bugs.gentoo.org/show_bug.cgi?id=207214 - http://www.debian.org/security/2008/dsa-1476 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00852.html - https://bugzilla.redhat.com/show_bug.cgi?id=425481 - http://security.gentoo.org/glsa/glsa-200802-07.xml - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html - http://secunia.com/advisories/
ml - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html - http://secunia.com/advisories/28738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39992 - http://www.ubuntu.com/usn/usn-573-1 - http://secunia.com/advisories/28952 - http://secunia.com/advisories/28608 - https://bugzilla.novell.com/show_bug.cgi?id=347822
CVE ID: CVE-2008-0009 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:32:23.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=431206 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://www.vupen.com/english/advisories/2008/0487/references - http://www.securityfocus.com/archive/1/487982/100/0/thread
ttp://www.vupen.com/english/advisories/2008/0487/references - http://www.securityfocus.com/archive/1/487982/100/0/threaded - http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html - http://secunia.com/advisories/28896 - http://secunia.com/advisories/28835 - http://www.securityfocus.com/bid/27799 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html - http://www.securityfocus.com/bid/27704
CVE ID: CVE-2008-0010 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:32:23.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1494 - http://www.securityfocus.com/bid/27796 - http://secunia.com/advisories/28875 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://www.vupen.com/english/advisories/2008
es/28875 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://www.vupen.com/english/advisories/2008/0487/references - http://www.securityfocus.com/archive/1/487982/100/0/threaded - http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html - http://secunia.com/advisories/28896 - http://secunia.com/advisories/28835 - https://www.exploit-db.com/exploits/5093 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html - http://www.securityfocus.com/bid/27704
CVE ID: CVE-2008-0011 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T07:32:23.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1780 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
ww.vupen.com/english/advisories/2008/1780 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236 - http://securitytracker.com/id?1020222 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 - http://www.us-cert.gov/cas/techalerts/TA08-162B.html - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - http://www.securityfocus.com/bid/29581 - http://secunia.com/advisories/30579 - http://marc.info/?l=bugtraq&m=121380194923597&w=2
CVE ID: CVE-2008-0012 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T07:32:23.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0013 and CVE-2008-0014. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39918 - http://www.iss.net/threats/310.html - http://w
/bid/32261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39918 - http://www.iss.net/threats/310.html - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127
CVE ID: CVE-2008-0013 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T07:32:23.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0014. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - http://www.iss.net/threats/310.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39919 - http://w
/bid/32261 - http://www.iss.net/threats/310.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39919 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127
CVE ID: CVE-2008-0014 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T07:32:23.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0013. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - http://www.iss.net/threats/310.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39920 - http://w
/bid/32261 - http://www.iss.net/threats/310.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39920 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127
CVE ID: CVE-2008-0015 State: PUBLISHED Published: 2009-07-07T23:00:00 Last Updated: 2024-08-07T07:32:23.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: Referen
ly 2009, aka "Microsoft Video ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35558 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx - http://osvdb.org/55651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333 - http://www.securityfocus.com/bid/35585 - http://secunia.com/advisories/36187 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
es/securitybulletins/2009/ms09-032 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436 - http://www.vupen.com/english/advisories/2009/2232 - http://www.securitytracker.com/id?1022514 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 - http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799 - http://isc.sans.org/diary.html?storyid=6733 - http://www.us-cert.gov/cas/techalerts/TA09-187A.html - http://www.microsoft.com/technet/security/advisory/972890.mspx - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - http://www.iss.net/threats/329.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
.html - http://www.iss.net/threats/329.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363 - http://www.kb.cert.org/vuls/id/180513