Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0554 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2253 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2559 - https://oval.c
ef%3A2253 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2559 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1196 - http://secunia.com/advisories/14922/ - http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3817 - http://www.kb.cert.org/vuls/id/756122 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A789
CVE ID: CVE-2005-0555 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4674 - https://oval.cisecurity.org/repository/search/defin
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4674 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3926 - http://secunia.com/advisories/14922/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3157 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19842 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2786 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html - http://www.kb.cert.org/vuls/id/222050
CVE ID: CVE-2005-0558 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2415 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4234 - https://oval.cisecurity.org/repository/search/definition
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4234 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19828 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1236
CVE ID: CVE-2005-0560 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4032 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021 - http://secunia.com/advisories/14920/
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021 - http://secunia.com/advisories/14920/ - http://www.kb.cert.org/vuls/id/275193 - http://www.osvdb.org/displayvuln.php?osvdb_id=15467 - http://xforce.iss.net/xforce/alerts/id/193 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html - http://marc.info/?l=bugtraq&m=111393947713420&w=2
CVE ID: CVE-2005-0562 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:05.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19950 - http://www.kb.cert.org/vuls/id/633446 - http://secunia.com/advisories/14915/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ecurity-updates/securitybulletins/2005/ms05-022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html
CVE ID: CVE-2005-0563 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:21:06.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("jav&#X41sc&#0010;ript:") in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029 - http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities - http://secunia.com/advisories/15697
-029 - http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities - http://secunia.com/advisories/15697 - http://www.securityfocus.com/bid/13952
CVE ID: CVE-2005-0564 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T21:21:05.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA05-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1190 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-035 - https://oval.cisecurity
def%3A1190 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1331 - http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities - http://www.kb.cert.org/vuls/id/218621
CVE ID: CVE-2005-0565 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110928565530828&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml - http://securitytracker.com/id?1013298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19482 - http://secunia.com/advisories/14399
CVE ID: CVE-2005-0566 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.goldenftpserver.com - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031098.html - http://www.kb.cert.org/vuls/id/620862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19015 - http://securitytracker.com/id?1012973 - http://www.securityfocus.com/bid/12333 - http://secunia.com/advisories/13966/
CVE ID: CVE-2005-0567 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19465 - http://secunia.com/advisories/14382/ - http://www.securityfocus.com/bid/12645 - http://
loud.com/vulnerabilities/19465 - http://secunia.com/advisories/14382/ - http://www.securityfocus.com/bid/12645 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1 - http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408 - http://marc.info/?l=bugtraq&m=110929725801154&w=2
CVE ID: CVE-2005-0568 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13289 - http://marc.info/?l=bugtraq&m=110927288423807&w=2 - http://aluigi.altervista.org/adv/sof2guidboom-adv.txt - http://securitytracker.com/id?1013291 - http://www.securityfocus.com/bid/12650
CVE ID: CVE-2005-0569 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14538 - http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19473 - http://www.securityfocus.com/bid/12652 - http://secunia.com/advi
://exchange.xforce.ibmcloud.com/vulnerabilities/19473 - http://www.securityfocus.com/bid/12652 - http://secunia.com/advisories/14394 - http://marc.info/?l=bugtraq&m=110927754230666&w=2
CVE ID: CVE-2005-0570 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12652 - http://secunia.com/advisories/14394 - http://marc.info/?l=bugtraq&m=110927754230666&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19483
CVE ID: CVE-2005-0571 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19478 - http://secunia.com/advisories/14394 - http://marc.info/?l=bugtraq&m=110927754230666&w=2 - http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch
CVE ID: CVE-2005-0572 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19480 - http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml - http://neossecurity.net/Advisories/Advisory-05.txt - http://marc.info/?l=bugtraq&m=110935172116369&w=2
CVE ID: CVE-2005-0573 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:06.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis) characters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=110928380421841&w=2 - http://securitytracker.com/id?1013300
CVE ID: CVE-2005-0574 State: PUBLISHED Published: 2005-02-27T05:00:00Z Last Updated: 2024-09-17T00:05:42.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391560 - http://www.securityfocus.com/bid/12662
CVE ID: CVE-2005-0575 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24897 - http://www.exploit-db.com/exploits/24950 - http://www.securityfocus.com/bid/12671 - http://secunia.com/advisories/14400 - http://marc.info/?l=bugtraq&m=110943766505666&w=2
CVE ID: CVE-2005-0576 State: PUBLISHED Published: 2005-02-27T05:00:00Z Last Updated: 2024-09-17T03:32:48.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12656 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57738-1 - http://secunia.com/advisories/14381
CVE ID: CVE-2005-0577 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14398 - http://www.freshports.org/x11-fonts/mkbold-mkitalic/ - http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html
CVE ID: CVE-2005-0578 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - http://www.mozilla.org/security/announce/mfsa2005-28.html - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/
com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10954
CVE ID: CVE-2005-0579 State: PUBLISHED Published: 2005-02-27T05:00:00 Last Updated: 2024-08-07T21:21:05.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication. Additional Analyst Notes: - CVE Program Container: References: - http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html - http://www.linuxcompatible.org/story42495.html
CVE ID: CVE-2005-0580 State: PUBLISHED Published: 2005-02-27T05:00:00Z Last Updated: 2024-09-17T00:06:21.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200502-30.xml
CVE ID: CVE-2005-0581 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110979326828704&w=2 - http://www.idefense.com/application/
rogram Container: References: - http://marc.info/?l=bugtraq&m=110979326828704&w=2 - http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities - http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities - http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities - http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp - http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities
CVE ID: CVE-2005-0582 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110979326828704&w=2 - http://www.idefense.com/application/poi/display?id=211&type=vulnerabilities - http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp
CVE ID: CVE-2005-0583 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:05.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110979326828704&w=2 - http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp - http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities
CVE ID: CVE-2005-0584 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034 - https://bugzilla.mozilla.org/show_bug.cgi?id=277574 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191 - http://www.
i?id=277574 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191 - http://www.mozilla.org/security/announce/mfsa2005-24.html - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
CVE ID: CVE-2005-0585 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035 - http://secunia.com/secunia_research/2004-15/advisory/ - http://www.mozilla.org/security/announce/mfsa2005-23.html - http://www.redhat.com/support/errata/RHSA-2005-176.html -
- http://www.mozilla.org/security/announce/mfsa2005-23.html - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://secunia.com/advisories/13599 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924
CVE ID: CVE-2005-0586 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100036 - http://www.securityfocus.com/bid/12659 - http://www.mozilla.org/security/announce/mfsa2005-22.html - http://www.redhat.com/support/errata/R
focus.com/bid/12659 - http://www.mozilla.org/security/announce/mfsa2005-22.html - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://secunia.com/advisories/13258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11152
CVE ID: CVE-2005-0587 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037 - http://www.securityfocus.com/bid/12659 - http://secunia.com/advisories/19823 - http://www.mozilla.org/security/announce/mfsa2005