Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0807 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:05:12.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/698564 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1030 - http://www.ciac.org/ciac/bulletins/o-115.shtml - http://securitytracker.com
inition/oval%3Aorg.mitre.oval%3Adef%3A1030 - http://www.ciac.org/ciac/bulletins/o-115.shtml - http://securitytracker.com/alerts/2004/Apr/1009762.html - http://www.securityfocus.com/bid/10123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15709 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A969 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A995
CVE ID: CVE-2003-0809 State: PUBLISHED Published: 2003-10-08T04:00:00 Last Updated: 2024-08-08T02:05:12.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A123 - http://www.securityfocus.com/bid/8565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13300 - https://docs.microsoft.com/en-us/security-updates/sec
565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13300 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-040 - http://www.osvdb.org/7887
CVE ID: CVE-2003-0812 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049 - http://www.securi
9-ms03-049.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049 - http://www.securityfocus.com/bid/9011 - http://marc.info/?l=bugtraq&m=106859247713009&w=2 - http://www.kb.cert.org/vuls/id/567620 - http://marc.info/?l=bugtraq&m=106865197102041&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A331 - http://www.cert.org/advisories/CA-2003-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A575
CVE ID: CVE-2003-0813 State: PUBLISHED Published: 2003-10-15T04:00:00 Last Updated: 2024-08-08T02:05:12.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http:/
certain exploits against those vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html - http://marc.info/?l=bugtraq&m=106579825211708&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html - http://www.kb.cert.org/vuls/id/547820 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A894 - http://marc.info/?l=bugtraq&m=106588827513795&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 - http://marc.info/?l=ntbugtraq&m=106580303918155&w=2 -
soft.com/en-us/security-updates/securitybulletins/2004/ms04-012 - http://marc.info/?l=ntbugtraq&m=106580303918155&w=2 - http://www.securitylab.ru/_exploits/rpc2.c.txt - http://xforce.iss.net/xforce/alerts/id/155 - http://www.securityfocus.com/bid/8811 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A900 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A893
CVE ID: CVE-2003-0814 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:05:12.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
LoadsJPU/BodyRefreshLoadsJPU-Content.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048 - http://securitytracker.com/id?1007687 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A392 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341 - http://www.securityfocus.com/archive/1/337086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344 - https://oval.cisecur
7086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A349 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html - http://www.kb.cert.org/vuls/id/326412 - http://secunia.com/advisories/10192
CVE ID: CVE-2003-0815 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:05:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-021.
ulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-021.shtml - http://marc.info/?l=bugtraq&m=106321757619047&w=2 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13676 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472 - http://www.osvdb.org/7889 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048 - http://securitytracker.com/id?1007687 - http://www.securityfocus.com/archive/1/3
dates/securitybulletins/2003/ms03-048 - http://securitytracker.com/id?1007687 - http://www.securityfocus.com/archive/1/337086 - http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359 - http://marc.info/?l=bugtraq&m=106322542104656&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356 - http://www.securityfocus.com/bid/9014 - http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM - http://www.safecenter.net/UMBRELLAWEBV4
9014 - http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM - http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352 - http://www.osvdb.org/7888 - http://secunia.com/advisories/10192
CVE ID: CVE-2003-0816 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:05:12.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in th
Ejpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106321781819727&w=2 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0146.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A362 - https://oval.cisecurity.org/repository/search/definitio
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A362 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A416 - http://marc.info/?l=bugtraq&m=106322063729496&w=2 - http://www.safecenter.net/liudieyu/WsFakeSrc/WsFakeSrc-Content.HTM - http://marc.info/?l=bugtraq&m=106321693517858&w=2 - http://www.kb.cert.org/vuls/id/771604 - http://marc.info/?l=bugtraq&m=106322240132721&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048 - http://securitytracker.com/id?1007687 - http://www.safecenter.net/UMBRELLAWEBV4/WsOpenFileJPU/WsOpen
ins/2003/ms03-048 - http://securitytracker.com/id?1007687 - http://www.safecenter.net/UMBRELLAWEBV4/WsOpenFileJPU/WsOpenFileJPU-Content.HTM - http://www.safecenter.net/UMBRELLAWEBV4/NAFfileJPU/NAFfileJPU-Content.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A409 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A479 - http://www.securityfocus.com/archive/1/337086 - http://www.safecenter.net/liudieyu/BackMyParent/BackMyParent-content.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A459 - http://www.securityfocus.com/archive/1/336937 - http://marc.info/?l=bugtraq&m=10
ion/oval%3Aorg.mitre.oval%3Adef%3A459 - http://www.securityfocus.com/archive/1/336937 - http://marc.info/?l=bugtraq&m=106321882821788&w=2 - http://marc.info/?l=bugtraq&m=106321638416884&w=2 - http://www.safecenter.net/liudieyu/BackMyParent2/BackMyParent2-Content.HTM - http://www.safecenter.net/liudieyu/NAFjpuInHistory/NAFjpuInHistory-Content.HTM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A363 - http://www.safecenter.net/liudieyu/RefBack/RefBack-Content.HTM - http://www.safecenter.net/liudieyu/WsOpenJpuInHistory/WsOpenJpuInHistory-Content.HTM - http://secunia.com/advisories/10192 - http://www.kb.cert.org/vuls/id/652452 - http://www.safecenter.net/l
-Content.HTM - http://secunia.com/advisories/10192 - http://www.kb.cert.org/vuls/id/652452 - http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-Content.HTM
CVE ID: CVE-2003-0817 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:05:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A508 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A543 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548 - https://oval.cisecurity.org/repository/search/definitio
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A520 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A556 - http://www.securityfocus.com/bid/9012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A549 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A566 - http://secunia.com/advisories/10192
CVE ID: CVE-2003-0818 State: PUBLISHED Published: 2004-02-11T05:00:00 Last Updated: 2024-08-08T02:05:12.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/583108 - http://www.us-cert.gov/cas/techalerts/TA04-041A.html - http
ainer: References: - http://www.kb.cert.org/vuls/id/583108 - http://www.us-cert.gov/cas/techalerts/TA04-041A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653 - http://marc.info/?l=bugtraq&m=107643836125615&w=2 - http://marc.info/?l=bugtraq&m=107643892224825&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A799 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796 - http://www.kb.cert.org/vuls/id/216324 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007 - http://marc.info/?l=ntbugtraq&m=107650972723080&w=2 - http://marc.info/?l=ntb
-updates/securitybulletins/2004/ms04-007 - http://marc.info/?l=ntbugtraq&m=107650972723080&w=2 - http://marc.info/?l=ntbugtraq&m=107650972617367&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797
CVE ID: CVE-2003-0819 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T02:05:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478 - http://www.securityfocus.com/bid/9406 - https://docs.microsoft.com/en-us/security-updates/
Aorg.mitre.oval%3Adef%3A478 - http://www.securityfocus.com/bid/9406 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001 - http://secunia.com/advisories/10611 - http://www.kb.cert.org/vuls/id/749342 - http://www.securitytracker.com/id?1008698 - http://www.uniras.gov.uk/vuls/2004/006489/h323.htm - http://www.cert.org/advisories/CA-2004-01.html - http://www.securityfocus.com/bid/9408
CVE ID: CVE-2003-0820 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13682 - http://www.security.nnov.ru/search/document.asp?docid=5243 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336 - https:/
nt.asp?docid=5243 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html - http://www.securityfocus.com/bid/8835 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
CVE ID: CVE-2003-0821 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695 - https://docs.microsoft.com/en-us/security-updates/securitybul
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13681
CVE ID: CVE-2003-0822 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A364 - http://marc.info/?l=bugtraq&m=106865318904055&w=2 - http://marc.info/?l=ntbugtraq
on/oval%3Aorg.mitre.oval%3Adef%3A364 - http://marc.info/?l=bugtraq&m=106865318904055&w=2 - http://marc.info/?l=ntbugtraq&m=106862654906759&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13674 - http://www.kb.cert.org/vuls/id/279156 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A699 - http://secunia.com/advisories/10195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A367 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A366 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A743
CVE ID: CVE-2003-0823 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:05:12.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/413886 - http://marc.info/?l=bugtraq&m=106322197932006&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A370 - https://oval.cisecurity.org/repository/se
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A371 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A588 - http://www.securityfocus.com/archive/1/337086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A733 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A369 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A368 - http://secunia.com/advis
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A368 - http://secunia.com/advisories/10192 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A372 - http://www.securitytracker.com/id?1006036
CVE ID: CVE-2003-0824 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13680 - https://oval.cisecurity.org/repository/search/definition/oval%3
s://exchange.xforce.ibmcloud.com/vulnerabilities/13680 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A591 - http://secunia.com/advisories/10195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A762 - http://www.kb.cert.org/vuls/id/179012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A308 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A606 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A625